diff --git a/go.mod b/go.mod
index c2137a70fb440979cef19cbade3c9627a3929b4e..993f023c56d6d2a139bd50279752fcbf686773df 100644
--- a/go.mod
+++ b/go.mod
@@ -11,7 +11,7 @@ require (
github.com/google/uuid v1.6.0
github.com/onsi/ginkgo/v2 v2.20.2
github.com/onsi/gomega v1.34.2
- github.com/openshift/api v0.0.0-20240924155631-232984653385
+ github.com/openshift/api v0.0.0-20241118215836-09b63162bb15
github.com/openshift/client-go v0.0.0-20240918182115-6a8ead8397fd
github.com/openshift/cluster-api-actuator-pkg/testutils v0.0.0-20241007145816-7038c320d36c
github.com/openshift/cluster-control-plane-machine-set-operator v0.0.0-20240909043600-373ac49835bf
diff --git a/go.sum b/go.sum
index 0f0210c26e1fb273c7754d09de09221b0f993e26..ad978b1b00a004dd2a97dea5e9c0b7d7005579c3 100644
--- a/go.sum
+++ b/go.sum
@@ -371,8 +371,8 @@ github.com/onsi/ginkgo/v2 v2.20.2 h1:7NVCeyIWROIAheY21RLS+3j2bb52W0W82tkberYytp4
github.com/onsi/ginkgo/v2 v2.20.2/go.mod h1:K9gyxPIlb+aIvnZ8bd9Ak+YP18w3APlR+5coaZoE2ag=
github.com/onsi/gomega v1.34.2 h1:pNCwDkzrsv7MS9kpaQvVb1aVLahQXyJ/Tv5oAZMI3i8=
github.com/onsi/gomega v1.34.2/go.mod h1:v1xfxRgk0KIsG+QOdm7p8UosrOzPYRo60fd3B/1Dukc=
-github.com/openshift/api v0.0.0-20240924155631-232984653385 h1:P6O191HwBj0ahEfea2wkvxhmW2fzXhvCh8hwHDvUozM=
-github.com/openshift/api v0.0.0-20240924155631-232984653385/go.mod h1:OOh6Qopf21pSzqNVCB5gomomBXb8o5sGKZxG2KNpaXM=
+github.com/openshift/api v0.0.0-20241118215836-09b63162bb15 h1:5bt8CBbXv1iSmBNCBXugsIT04NgHFCSkM1mOyuE8s2Q=
+github.com/openshift/api v0.0.0-20241118215836-09b63162bb15/go.mod h1:Shkl4HanLwDiiBzakv+con/aMGnVE2MAGvoKp5oyYUo=
github.com/openshift/client-go v0.0.0-20240918182115-6a8ead8397fd h1:Gd0+bYdcfGIsDOJ8BwTJJjQeXoziyIsTwqp/s38rKyM=
github.com/openshift/client-go v0.0.0-20240918182115-6a8ead8397fd/go.mod h1:EB7GeA/vpf9AHklMgnnT0+uG6l/3f8cChtCFbJFrk4g=
github.com/openshift/cluster-api-actuator-pkg/testutils v0.0.0-20241007145816-7038c320d36c h1:9A/0QoTZo2xh5j6nmh5CGNVBG8Ql1RmXmCcrikBnG+w=
diff --git a/install/0000_30_machine-api-operator_02_machine.CustomNoUpgrade.crd.yaml b/install/0000_30_machine-api-operator_02_machine.CustomNoUpgrade.crd.yaml
index 0ed0b4ffd931f3f90db5df058d89fdb9438b0a25..f03eba4679a72a671c641900452a24f37e1a22ba 100644
--- a/install/0000_30_machine-api-operator_02_machine.CustomNoUpgrade.crd.yaml
+++ b/install/0000_30_machine-api-operator_02_machine.CustomNoUpgrade.crd.yaml
@@ -57,19 +57,24 @@ spec:
name: v1beta1
schema:
openAPIV3Schema:
- description: 'Machine is the Schema for the machines API Compatibility level
- 2: Stable within a major release for a minimum of 9 months or 3 minor releases
- (whichever is longer).'
+ description: |-
+ Machine is the Schema for the machines API
+ Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -77,49 +82,48 @@ spec:
description: MachineSpec defines the desired state of Machine
properties:
authoritativeAPI:
- description: authoritativeAPI is the API that is authoritative for
- this resource. Valid values are MachineAPI and ClusterAPI. When
- set to MachineAPI, writes to the spec of the machine.openshift.io
- copy of this resource will be reflected into the cluster.x-k8s.io
- copy. When set to ClusterAPI, writes to the spec of the cluster.x-k8s.io
- copy of this resource will be reflected into the machine.openshift.io
- copy. Updates to the status will be reflected in both copies of
- the resource, based on the controller implementing the functionality
- of the API. Currently the authoritative API determines which controller
- will manage the resource, this will change in a future release.
- To ensure the change has been accepted, please verify that the `status.authoritativeAPI`
- field has been updated to the desired value and that the `Synchronized`
- condition is present and set to `True`.
+ default: MachineAPI
+ description: |-
+ authoritativeAPI is the API that is authoritative for this resource.
+ Valid values are MachineAPI and ClusterAPI.
+ When set to MachineAPI, writes to the spec of the machine.openshift.io copy of this resource will be reflected into the cluster.x-k8s.io copy.
+ When set to ClusterAPI, writes to the spec of the cluster.x-k8s.io copy of this resource will be reflected into the machine.openshift.io copy.
+ Updates to the status will be reflected in both copies of the resource, based on the controller implementing the functionality of the API.
+ Currently the authoritative API determines which controller will manage the resource, this will change in a future release.
+ To ensure the change has been accepted, please verify that the `status.authoritativeAPI` field has been updated to the desired value and that the `Synchronized` condition is present and set to `True`.
enum:
- MachineAPI
- ClusterAPI
type: string
lifecycleHooks:
- description: LifecycleHooks allow users to pause operations on the
- machine at certain predefined points within the machine lifecycle.
+ description: |-
+ LifecycleHooks allow users to pause operations on the machine at
+ certain predefined points within the machine lifecycle.
properties:
preDrain:
- description: PreDrain hooks prevent the machine from being drained.
+ description: |-
+ PreDrain hooks prevent the machine from being drained.
This also blocks further lifecycle events, such as termination.
items:
description: LifecycleHook represents a single instance of a
lifecycle hook
properties:
name:
- description: Name defines a unique name for the lifcycle
- hook. The name should be unique and descriptive, ideally
- 1-3 words, in CamelCase or it may be namespaced, eg. foo.example.com/CamelCase.
- Names must be unique and should only be managed by a single
- entity.
+ description: |-
+ Name defines a unique name for the lifcycle hook.
+ The name should be unique and descriptive, ideally 1-3 words, in CamelCase or
+ it may be namespaced, eg. foo.example.com/CamelCase.
+ Names must be unique and should only be managed by a single entity.
maxLength: 256
minLength: 3
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
owner:
- description: Owner defines the owner of the lifecycle hook.
+ description: |-
+ Owner defines the owner of the lifecycle hook.
This should be descriptive enough so that users can identify
- who/what is responsible for blocking the lifecycle. This
- could be the name of a controller (e.g. clusteroperator/etcd)
+ who/what is responsible for blocking the lifecycle.
+ This could be the name of a controller (e.g. clusteroperator/etcd)
or an administrator managing the hook.
maxLength: 512
minLength: 3
@@ -133,28 +137,29 @@ spec:
- name
x-kubernetes-list-type: map
preTerminate:
- description: PreTerminate hooks prevent the machine from being
- terminated. PreTerminate hooks be actioned after the Machine
- has been drained.
+ description: |-
+ PreTerminate hooks prevent the machine from being terminated.
+ PreTerminate hooks be actioned after the Machine has been drained.
items:
description: LifecycleHook represents a single instance of a
lifecycle hook
properties:
name:
- description: Name defines a unique name for the lifcycle
- hook. The name should be unique and descriptive, ideally
- 1-3 words, in CamelCase or it may be namespaced, eg. foo.example.com/CamelCase.
- Names must be unique and should only be managed by a single
- entity.
+ description: |-
+ Name defines a unique name for the lifcycle hook.
+ The name should be unique and descriptive, ideally 1-3 words, in CamelCase or
+ it may be namespaced, eg. foo.example.com/CamelCase.
+ Names must be unique and should only be managed by a single entity.
maxLength: 256
minLength: 3
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
owner:
- description: Owner defines the owner of the lifecycle hook.
+ description: |-
+ Owner defines the owner of the lifecycle hook.
This should be descriptive enough so that users can identify
- who/what is responsible for blocking the lifecycle. This
- could be the name of a controller (e.g. clusteroperator/etcd)
+ who/what is responsible for blocking the lifecycle.
+ This could be the name of a controller (e.g. clusteroperator/etcd)
or an administrator managing the hook.
maxLength: 512
minLength: 3
@@ -169,94 +174,111 @@ spec:
x-kubernetes-list-type: map
type: object
metadata:
- description: ObjectMeta will autopopulate the Node created. Use this
- to indicate what labels, annotations, name prefix, etc., should
- be used when creating the Node.
+ description: |-
+ ObjectMeta will autopopulate the Node created. Use this to
+ indicate what labels, annotations, name prefix, etc., should be used
+ when creating the Node.
properties:
annotations:
additionalProperties:
type: string
- description: 'Annotations is an unstructured key value map stored
- with a resource that may be set by external tools to store and
- retrieve arbitrary metadata. They are not queryable and should
- be preserved when modifying objects. More info: http://kubernetes.io/docs/user-guide/annotations'
+ description: |-
+ Annotations is an unstructured key value map stored with a resource that may be
+ set by external tools to store and retrieve arbitrary metadata. They are not
+ queryable and should be preserved when modifying objects.
+ More info: http://kubernetes.io/docs/user-guide/annotations
type: object
generateName:
- description: "GenerateName is an optional prefix, used by the
- server, to generate a unique name ONLY IF the Name field has
- not been provided. If this field is used, the name returned
- to the client will be different than the name passed. This value
- will also be combined with a unique suffix. The provided value
- has the same validation rules as the Name field, and may be
- truncated by the length of the suffix required to make the value
- unique on the server. \n If this field is specified and the
- generated name exists, the server will NOT return a 409 - instead,
- it will either return 201 Created or 500 with Reason ServerTimeout
- indicating a unique name could not be found in the time allotted,
- and the client should retry (optionally after the time indicated
- in the Retry-After header). \n Applied only if Name is not specified.
- More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency"
+ description: |-
+ GenerateName is an optional prefix, used by the server, to generate a unique
+ name ONLY IF the Name field has not been provided.
+ If this field is used, the name returned to the client will be different
+ than the name passed. This value will also be combined with a unique suffix.
+ The provided value has the same validation rules as the Name field,
+ and may be truncated by the length of the suffix required to make the value
+ unique on the server.
+
+ If this field is specified and the generated name exists, the server will
+ NOT return a 409 - instead, it will either return 201 Created or 500 with Reason
+ ServerTimeout indicating a unique name could not be found in the time allotted, and the client
+ should retry (optionally after the time indicated in the Retry-After header).
+
+ Applied only if Name is not specified.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
type: string
labels:
additionalProperties:
type: string
- description: 'Map of string keys and values that can be used to
- organize and categorize (scope and select) objects. May match
- selectors of replication controllers and services. More info:
- http://kubernetes.io/docs/user-guide/labels'
+ description: |-
+ Map of string keys and values that can be used to organize and categorize
+ (scope and select) objects. May match selectors of replication controllers
+ and services.
+ More info: http://kubernetes.io/docs/user-guide/labels
type: object
name:
- description: 'Name must be unique within a namespace. Is required
- when creating resources, although some resources may allow a
- client to request the generation of an appropriate name automatically.
- Name is primarily intended for creation idempotence and configuration
- definition. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/identifiers#names'
+ description: |-
+ Name must be unique within a namespace. Is required when creating resources, although
+ some resources may allow a client to request the generation of an appropriate name
+ automatically. Name is primarily intended for creation idempotence and configuration
+ definition.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/identifiers#names
type: string
namespace:
- description: "Namespace defines the space within each name must
- be unique. An empty namespace is equivalent to the \"default\"
- namespace, but \"default\" is the canonical representation.
- Not all objects are required to be scoped to a namespace - the
- value of this field for those objects will be empty. \n Must
- be a DNS_LABEL. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/namespaces"
+ description: |-
+ Namespace defines the space within each name must be unique. An empty namespace is
+ equivalent to the "default" namespace, but "default" is the canonical representation.
+ Not all objects are required to be scoped to a namespace - the value of this field for
+ those objects will be empty.
+
+ Must be a DNS_LABEL.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/namespaces
type: string
ownerReferences:
- description: List of objects depended by this object. If ALL objects
- in the list have been deleted, this object will be garbage collected.
- If this object is managed by a controller, then an entry in
- this list will point to this controller, with the controller
- field set to true. There cannot be more than one managing controller.
+ description: |-
+ List of objects depended by this object. If ALL objects in the list have
+ been deleted, this object will be garbage collected. If this object is managed by a controller,
+ then an entry in this list will point to this controller, with the controller field set to true.
+ There cannot be more than one managing controller.
items:
- description: OwnerReference contains enough information to let
- you identify an owning object. An owning object must be in
- the same namespace as the dependent, or be cluster-scoped,
- so there is no namespace field.
+ description: |-
+ OwnerReference contains enough information to let you identify an owning
+ object. An owning object must be in the same namespace as the dependent, or
+ be cluster-scoped, so there is no namespace field.
properties:
apiVersion:
description: API version of the referent.
type: string
blockOwnerDeletion:
- description: If true, AND if the owner has the "foregroundDeletion"
- finalizer, then the owner cannot be deleted from the key-value
- store until this reference is removed. See https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
- for how the garbage collector interacts with this field
- and enforces the foreground deletion. Defaults to false.
- To set this field, a user needs "delete" permission of
- the owner, otherwise 422 (Unprocessable Entity) will be
- returned.
+ description: |-
+ If true, AND if the owner has the "foregroundDeletion" finalizer, then
+ the owner cannot be deleted from the key-value store until this
+ reference is removed.
+ See https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
+ for how the garbage collector interacts with this field and enforces the foreground deletion.
+ Defaults to false.
+ To set this field, a user needs "delete" permission of the owner,
+ otherwise 422 (Unprocessable Entity) will be returned.
type: boolean
controller:
description: If true, this reference points to the managing
controller.
type: boolean
kind:
- description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind of the referent.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
- description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names'
+ description: |-
+ Name of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names
type: string
uid:
- description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids'
+ description: |-
+ UID of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids
type: string
required:
- apiVersion
@@ -271,19 +293,16 @@ spec:
x-kubernetes-list-type: map
type: object
providerID:
- description: ProviderID is the identification ID of the machine provided
- by the provider. This field must match the provider ID as seen on
- the node object corresponding to this machine. This field is required
- by higher level consumers of cluster-api. Example use case is cluster
- autoscaler with cluster-api as provider. Clean-up logic in the autoscaler
- compares machines to nodes to find out machines at provider which
- could not get registered as Kubernetes nodes. With cluster-api as
- a generic out-of-tree provider for autoscaler, this field is required
- by autoscaler to be able to have a provider view of the list of
- machines. Another list of nodes is queried from the k8s apiserver
- and then a comparison is done to find out unregistered machines
- and are marked for delete. This field will be set by the actuators
- and consumed by higher level entities like autoscaler that will
+ description: |-
+ ProviderID is the identification ID of the machine provided by the provider.
+ This field must match the provider ID as seen on the node object corresponding to this machine.
+ This field is required by higher level consumers of cluster-api. Example use case is cluster autoscaler
+ with cluster-api as provider. Clean-up logic in the autoscaler compares machines to nodes to find out
+ machines at provider which could not get registered as Kubernetes nodes. With cluster-api as a
+ generic out-of-tree provider for autoscaler, this field is required by autoscaler to be
+ able to have a provider view of the list of machines. Another list of nodes is queried from the k8s apiserver
+ and then a comparison is done to find out unregistered machines and are marked for delete.
+ This field will be set by the actuators and consumed by higher level entities like autoscaler that will
be interfacing with cluster-api as generic provider.
type: string
providerSpec:
@@ -291,36 +310,40 @@ spec:
to use during node creation.
properties:
value:
- description: Value is an inlined, serialized representation of
- the resource configuration. It is recommended that providers
- maintain their own versioned API types that should be serialized/deserialized
- from this field, akin to component config.
+ description: |-
+ Value is an inlined, serialized representation of the resource
+ configuration. It is recommended that providers maintain their own
+ versioned API types that should be serialized/deserialized from this
+ field, akin to component config.
type: object
x-kubernetes-preserve-unknown-fields: true
type: object
taints:
- description: The list of the taints to be applied to the corresponding
- Node in additive manner. This list will not overwrite any other
- taints added to the Node on an ongoing basis by other entities.
- These taints should be actively reconciled e.g. if you ask the machine
- controller to apply a taint and then manually remove the taint the
- machine controller will put it back) but not have the machine controller
+ description: |-
+ The list of the taints to be applied to the corresponding Node in additive
+ manner. This list will not overwrite any other taints added to the Node on
+ an ongoing basis by other entities. These taints should be actively reconciled
+ e.g. if you ask the machine controller to apply a taint and then manually remove
+ the taint the machine controller will put it back) but not have the machine controller
remove any taints
items:
- description: The node this Taint is attached to has the "effect"
- on any pod that does not tolerate the Taint.
+ description: |-
+ The node this Taint is attached to has the "effect" on
+ any pod that does not tolerate the Taint.
properties:
effect:
- description: Required. The effect of the taint on pods that
- do not tolerate the taint. Valid effects are NoSchedule, PreferNoSchedule
- and NoExecute.
+ description: |-
+ Required. The effect of the taint on pods
+ that do not tolerate the taint.
+ Valid effects are NoSchedule, PreferNoSchedule and NoExecute.
type: string
key:
description: Required. The taint key to be applied to a node.
type: string
timeAdded:
- description: TimeAdded represents the time at which the taint
- was added. It is only written for NoExecute taints.
+ description: |-
+ TimeAdded represents the time at which the taint was added.
+ It is only written for NoExecute taints.
format: date-time
type: string
value:
@@ -356,13 +379,12 @@ spec:
type: array
x-kubernetes-list-type: atomic
authoritativeAPI:
- description: authoritativeAPI is the API that is authoritative for
- this resource. Valid values are MachineAPI, ClusterAPI and Migrating.
- This value is updated by the migration controller to reflect the
- authoritative API. Machine API and Cluster API controllers use this
- value to determine whether or not to reconcile the resource. When
- set to Migrating, the migration controller is currently performing
- the handover of authority from one API to the other.
+ description: |-
+ authoritativeAPI is the API that is authoritative for this resource.
+ Valid values are MachineAPI, ClusterAPI and Migrating.
+ This value is updated by the migration controller to reflect the authoritative API.
+ Machine API and Cluster API controllers use this value to determine whether or not to reconcile the resource.
+ When set to Migrating, the migration controller is currently performing the handover of authority from one API to the other.
enum:
- MachineAPI
- ClusterAPI
@@ -380,39 +402,41 @@ spec:
operational state.
properties:
lastTransitionTime:
- description: Last time the condition transitioned from one status
- to another. This should be when the underlying condition changed.
- If that is not known, then using the time when the API field
- changed is acceptable.
+ description: |-
+ Last time the condition transitioned from one status to another.
+ This should be when the underlying condition changed. If that is not known, then using the time when
+ the API field changed is acceptable.
format: date-time
type: string
message:
- description: A human readable message indicating details about
- the transition. This field may be empty.
+ description: |-
+ A human readable message indicating details about the transition.
+ This field may be empty.
type: string
reason:
- description: The reason for the condition's last transition
- in CamelCase. The specific API may choose whether or not this
- field is considered a guaranteed API. This field may not be
- empty.
+ description: |-
+ The reason for the condition's last transition in CamelCase.
+ The specific API may choose whether or not this field is considered a guaranteed API.
+ This field may not be empty.
type: string
severity:
- description: Severity provides an explicit classification of
- Reason code, so the users or machines can immediately understand
- the current situation and act accordingly. The Severity field
- MUST be set only when Status=False.
+ description: |-
+ Severity provides an explicit classification of Reason code, so the users or machines can immediately
+ understand the current situation and act accordingly.
+ The Severity field MUST be set only when Status=False.
type: string
status:
description: Status of the condition, one of True, False, Unknown.
type: string
type:
- description: Type of condition in CamelCase or in foo.example.com/CamelCase.
- Many .condition.type values are consistent across resources
- like Available, but because arbitrary conditions can be useful
- (see .node.status.conditions), the ability to deconflict is
- important.
+ description: |-
+ Type of condition in CamelCase or in foo.example.com/CamelCase.
+ Many .condition.type values are consistent across resources like Available, but because arbitrary conditions
+ can be useful (see .node.status.conditions), the ability to deconflict is important.
type: string
required:
+ - lastTransitionTime
+ - status
- type
type: object
type: array
@@ -420,41 +444,49 @@ spec:
- type
x-kubernetes-list-type: map
errorMessage:
- description: "ErrorMessage will be set in the event that there is
- a terminal problem reconciling the Machine and will contain a more
- verbose string suitable for logging and human consumption. \n This
- field should not be set for transitive errors that a controller
- faces that are expected to be fixed automatically over time (like
- service outages), but instead indicate that something is fundamentally
- wrong with the Machine's spec or the configuration of the controller,
- and that manual intervention is required. Examples of terminal errors
- would be invalid combinations of settings in the spec, values that
- are unsupported by the controller, or the responsible controller
- itself being critically misconfigured. \n Any transient errors that
- occur during the reconciliation of Machines can be added as events
- to the Machine object and/or logged in the controller's output."
+ description: |-
+ ErrorMessage will be set in the event that there is a terminal problem
+ reconciling the Machine and will contain a more verbose string suitable
+ for logging and human consumption.
+
+ This field should not be set for transitive errors that a controller
+ faces that are expected to be fixed automatically over
+ time (like service outages), but instead indicate that something is
+ fundamentally wrong with the Machine's spec or the configuration of
+ the controller, and that manual intervention is required. Examples
+ of terminal errors would be invalid combinations of settings in the
+ spec, values that are unsupported by the controller, or the
+ responsible controller itself being critically misconfigured.
+
+ Any transient errors that occur during the reconciliation of Machines
+ can be added as events to the Machine object and/or logged in the
+ controller's output.
type: string
errorReason:
- description: "ErrorReason will be set in the event that there is a
- terminal problem reconciling the Machine and will contain a succinct
- value suitable for machine interpretation. \n This field should
- not be set for transitive errors that a controller faces that are
- expected to be fixed automatically over time (like service outages),
- but instead indicate that something is fundamentally wrong with
- the Machine's spec or the configuration of the controller, and that
- manual intervention is required. Examples of terminal errors would
- be invalid combinations of settings in the spec, values that are
- unsupported by the controller, or the responsible controller itself
- being critically misconfigured. \n Any transient errors that occur
- during the reconciliation of Machines can be added as events to
- the Machine object and/or logged in the controller's output."
+ description: |-
+ ErrorReason will be set in the event that there is a terminal problem
+ reconciling the Machine and will contain a succinct value suitable
+ for machine interpretation.
+
+ This field should not be set for transitive errors that a controller
+ faces that are expected to be fixed automatically over
+ time (like service outages), but instead indicate that something is
+ fundamentally wrong with the Machine's spec or the configuration of
+ the controller, and that manual intervention is required. Examples
+ of terminal errors would be invalid combinations of settings in the
+ spec, values that are unsupported by the controller, or the
+ responsible controller itself being critically misconfigured.
+
+ Any transient errors that occur during the reconciliation of Machines
+ can be added as events to the Machine object and/or logged in the
+ controller's output.
type: string
lastOperation:
- description: LastOperation describes the last-operation performed
- by the machine-controller. This API should be useful as a history
- in terms of the latest operation performed on the specific machine.
- It should also convey the state of the latest-operation for example
- if it is still on-going, failed or completed successfully.
+ description: |-
+ LastOperation describes the last-operation performed by the machine-controller.
+ This API should be useful as a history in terms of the latest operation performed on the
+ specific machine. It should also convey the state of the latest-operation for example if
+ it is still on-going, failed or completed successfully.
properties:
description:
description: Description is the human-readable description of
@@ -466,11 +498,13 @@ spec:
format: date-time
type: string
state:
- description: State is the current status of the last performed
- operation. E.g. Processing, Failed, Successful etc
+ description: |-
+ State is the current status of the last performed operation.
+ E.g. Processing, Failed, Successful etc
type: string
type:
- description: Type is the type of operation which was last performed.
+ description: |-
+ Type is the type of operation which was last performed.
E.g. Create, Delete, Update etc
type: string
type: object
@@ -485,52 +519,59 @@ spec:
description: API version of the referent.
type: string
fieldPath:
- description: 'If referring to a piece of an object instead of
- an entire object, this string should contain a valid JSON/Go
- field access statement, such as desiredState.manifest.containers[2].
- For example, if the object reference is to a container within
- a pod, this would take on a value like: "spec.containers{name}"
- (where "name" refers to the name of the container that triggered
- the event) or if no container name is specified "spec.containers[2]"
- (container with index 2 in this pod). This syntax is chosen
- only to have some well-defined way of referencing a part of
- an object. TODO: this design is not final and this field is
- subject to change in the future.'
+ description: |-
+ If referring to a piece of an object instead of an entire object, this string
+ should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
+ For example, if the object reference is to a container within a pod, this would take on a value like:
+ "spec.containers{name}" (where "name" refers to the name of the container that triggered
+ the event) or if no container name is specified "spec.containers[2]" (container with
+ index 2 in this pod). This syntax is chosen only to have some well-defined way of
+ referencing a part of an object.
type: string
kind:
- description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind of the referent.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
- description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
+ description: |-
+ Name of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
type: string
namespace:
- description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
+ description: |-
+ Namespace of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
type: string
resourceVersion:
- description: 'Specific resourceVersion to which this reference
- is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency'
+ description: |-
+ Specific resourceVersion to which this reference is made, if any.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
type: string
uid:
- description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids'
+ description: |-
+ UID of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
type: string
type: object
x-kubernetes-map-type: atomic
phase:
- description: 'Phase represents the current phase of machine actuation.
- One of: Failed, Provisioning, Provisioned, Running, Deleting'
+ description: |-
+ Phase represents the current phase of machine actuation.
+ One of: Failed, Provisioning, Provisioned, Running, Deleting
type: string
providerStatus:
- description: ProviderStatus details a Provider-specific status. It
- is recommended that providers maintain their own versioned API types
- that should be serialized/deserialized from this field.
+ description: |-
+ ProviderStatus details a Provider-specific status.
+ It is recommended that providers maintain their
+ own versioned API types that should be
+ serialized/deserialized from this field.
type: object
x-kubernetes-preserve-unknown-fields: true
synchronizedGeneration:
- description: synchronizedGeneration is the generation of the authoritative
- resource that the non-authoritative resource is synchronised with.
- This field is set when the authoritative resource is updated and
- the sync controller has updated the non-authoritative resource to
- match.
+ description: |-
+ synchronizedGeneration is the generation of the authoritative resource that the non-authoritative resource is synchronised with.
+ This field is set when the authoritative resource is updated and the sync controller has updated the non-authoritative resource to match.
format: int64
minimum: 0
type: integer
diff --git a/install/0000_30_machine-api-operator_02_machine.Default.crd.yaml b/install/0000_30_machine-api-operator_02_machine.Default.crd.yaml
index c3ed7f231cf84ec329a5e99e05cd34c2fd782713..6788e737b350855261ec97a3b03c7527054b1db4 100644
--- a/install/0000_30_machine-api-operator_02_machine.Default.crd.yaml
+++ b/install/0000_30_machine-api-operator_02_machine.Default.crd.yaml
@@ -57,19 +57,24 @@ spec:
name: v1beta1
schema:
openAPIV3Schema:
- description: 'Machine is the Schema for the machines API Compatibility level
- 2: Stable within a major release for a minimum of 9 months or 3 minor releases
- (whichever is longer).'
+ description: |-
+ Machine is the Schema for the machines API
+ Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -77,31 +82,34 @@ spec:
description: MachineSpec defines the desired state of Machine
properties:
lifecycleHooks:
- description: LifecycleHooks allow users to pause operations on the
- machine at certain predefined points within the machine lifecycle.
+ description: |-
+ LifecycleHooks allow users to pause operations on the machine at
+ certain predefined points within the machine lifecycle.
properties:
preDrain:
- description: PreDrain hooks prevent the machine from being drained.
+ description: |-
+ PreDrain hooks prevent the machine from being drained.
This also blocks further lifecycle events, such as termination.
items:
description: LifecycleHook represents a single instance of a
lifecycle hook
properties:
name:
- description: Name defines a unique name for the lifcycle
- hook. The name should be unique and descriptive, ideally
- 1-3 words, in CamelCase or it may be namespaced, eg. foo.example.com/CamelCase.
- Names must be unique and should only be managed by a single
- entity.
+ description: |-
+ Name defines a unique name for the lifcycle hook.
+ The name should be unique and descriptive, ideally 1-3 words, in CamelCase or
+ it may be namespaced, eg. foo.example.com/CamelCase.
+ Names must be unique and should only be managed by a single entity.
maxLength: 256
minLength: 3
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
owner:
- description: Owner defines the owner of the lifecycle hook.
+ description: |-
+ Owner defines the owner of the lifecycle hook.
This should be descriptive enough so that users can identify
- who/what is responsible for blocking the lifecycle. This
- could be the name of a controller (e.g. clusteroperator/etcd)
+ who/what is responsible for blocking the lifecycle.
+ This could be the name of a controller (e.g. clusteroperator/etcd)
or an administrator managing the hook.
maxLength: 512
minLength: 3
@@ -115,28 +123,29 @@ spec:
- name
x-kubernetes-list-type: map
preTerminate:
- description: PreTerminate hooks prevent the machine from being
- terminated. PreTerminate hooks be actioned after the Machine
- has been drained.
+ description: |-
+ PreTerminate hooks prevent the machine from being terminated.
+ PreTerminate hooks be actioned after the Machine has been drained.
items:
description: LifecycleHook represents a single instance of a
lifecycle hook
properties:
name:
- description: Name defines a unique name for the lifcycle
- hook. The name should be unique and descriptive, ideally
- 1-3 words, in CamelCase or it may be namespaced, eg. foo.example.com/CamelCase.
- Names must be unique and should only be managed by a single
- entity.
+ description: |-
+ Name defines a unique name for the lifcycle hook.
+ The name should be unique and descriptive, ideally 1-3 words, in CamelCase or
+ it may be namespaced, eg. foo.example.com/CamelCase.
+ Names must be unique and should only be managed by a single entity.
maxLength: 256
minLength: 3
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
owner:
- description: Owner defines the owner of the lifecycle hook.
+ description: |-
+ Owner defines the owner of the lifecycle hook.
This should be descriptive enough so that users can identify
- who/what is responsible for blocking the lifecycle. This
- could be the name of a controller (e.g. clusteroperator/etcd)
+ who/what is responsible for blocking the lifecycle.
+ This could be the name of a controller (e.g. clusteroperator/etcd)
or an administrator managing the hook.
maxLength: 512
minLength: 3
@@ -151,94 +160,111 @@ spec:
x-kubernetes-list-type: map
type: object
metadata:
- description: ObjectMeta will autopopulate the Node created. Use this
- to indicate what labels, annotations, name prefix, etc., should
- be used when creating the Node.
+ description: |-
+ ObjectMeta will autopopulate the Node created. Use this to
+ indicate what labels, annotations, name prefix, etc., should be used
+ when creating the Node.
properties:
annotations:
additionalProperties:
type: string
- description: 'Annotations is an unstructured key value map stored
- with a resource that may be set by external tools to store and
- retrieve arbitrary metadata. They are not queryable and should
- be preserved when modifying objects. More info: http://kubernetes.io/docs/user-guide/annotations'
+ description: |-
+ Annotations is an unstructured key value map stored with a resource that may be
+ set by external tools to store and retrieve arbitrary metadata. They are not
+ queryable and should be preserved when modifying objects.
+ More info: http://kubernetes.io/docs/user-guide/annotations
type: object
generateName:
- description: "GenerateName is an optional prefix, used by the
- server, to generate a unique name ONLY IF the Name field has
- not been provided. If this field is used, the name returned
- to the client will be different than the name passed. This value
- will also be combined with a unique suffix. The provided value
- has the same validation rules as the Name field, and may be
- truncated by the length of the suffix required to make the value
- unique on the server. \n If this field is specified and the
- generated name exists, the server will NOT return a 409 - instead,
- it will either return 201 Created or 500 with Reason ServerTimeout
- indicating a unique name could not be found in the time allotted,
- and the client should retry (optionally after the time indicated
- in the Retry-After header). \n Applied only if Name is not specified.
- More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency"
+ description: |-
+ GenerateName is an optional prefix, used by the server, to generate a unique
+ name ONLY IF the Name field has not been provided.
+ If this field is used, the name returned to the client will be different
+ than the name passed. This value will also be combined with a unique suffix.
+ The provided value has the same validation rules as the Name field,
+ and may be truncated by the length of the suffix required to make the value
+ unique on the server.
+
+ If this field is specified and the generated name exists, the server will
+ NOT return a 409 - instead, it will either return 201 Created or 500 with Reason
+ ServerTimeout indicating a unique name could not be found in the time allotted, and the client
+ should retry (optionally after the time indicated in the Retry-After header).
+
+ Applied only if Name is not specified.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
type: string
labels:
additionalProperties:
type: string
- description: 'Map of string keys and values that can be used to
- organize and categorize (scope and select) objects. May match
- selectors of replication controllers and services. More info:
- http://kubernetes.io/docs/user-guide/labels'
+ description: |-
+ Map of string keys and values that can be used to organize and categorize
+ (scope and select) objects. May match selectors of replication controllers
+ and services.
+ More info: http://kubernetes.io/docs/user-guide/labels
type: object
name:
- description: 'Name must be unique within a namespace. Is required
- when creating resources, although some resources may allow a
- client to request the generation of an appropriate name automatically.
- Name is primarily intended for creation idempotence and configuration
- definition. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/identifiers#names'
+ description: |-
+ Name must be unique within a namespace. Is required when creating resources, although
+ some resources may allow a client to request the generation of an appropriate name
+ automatically. Name is primarily intended for creation idempotence and configuration
+ definition.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/identifiers#names
type: string
namespace:
- description: "Namespace defines the space within each name must
- be unique. An empty namespace is equivalent to the \"default\"
- namespace, but \"default\" is the canonical representation.
- Not all objects are required to be scoped to a namespace - the
- value of this field for those objects will be empty. \n Must
- be a DNS_LABEL. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/namespaces"
+ description: |-
+ Namespace defines the space within each name must be unique. An empty namespace is
+ equivalent to the "default" namespace, but "default" is the canonical representation.
+ Not all objects are required to be scoped to a namespace - the value of this field for
+ those objects will be empty.
+
+ Must be a DNS_LABEL.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/namespaces
type: string
ownerReferences:
- description: List of objects depended by this object. If ALL objects
- in the list have been deleted, this object will be garbage collected.
- If this object is managed by a controller, then an entry in
- this list will point to this controller, with the controller
- field set to true. There cannot be more than one managing controller.
+ description: |-
+ List of objects depended by this object. If ALL objects in the list have
+ been deleted, this object will be garbage collected. If this object is managed by a controller,
+ then an entry in this list will point to this controller, with the controller field set to true.
+ There cannot be more than one managing controller.
items:
- description: OwnerReference contains enough information to let
- you identify an owning object. An owning object must be in
- the same namespace as the dependent, or be cluster-scoped,
- so there is no namespace field.
+ description: |-
+ OwnerReference contains enough information to let you identify an owning
+ object. An owning object must be in the same namespace as the dependent, or
+ be cluster-scoped, so there is no namespace field.
properties:
apiVersion:
description: API version of the referent.
type: string
blockOwnerDeletion:
- description: If true, AND if the owner has the "foregroundDeletion"
- finalizer, then the owner cannot be deleted from the key-value
- store until this reference is removed. See https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
- for how the garbage collector interacts with this field
- and enforces the foreground deletion. Defaults to false.
- To set this field, a user needs "delete" permission of
- the owner, otherwise 422 (Unprocessable Entity) will be
- returned.
+ description: |-
+ If true, AND if the owner has the "foregroundDeletion" finalizer, then
+ the owner cannot be deleted from the key-value store until this
+ reference is removed.
+ See https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
+ for how the garbage collector interacts with this field and enforces the foreground deletion.
+ Defaults to false.
+ To set this field, a user needs "delete" permission of the owner,
+ otherwise 422 (Unprocessable Entity) will be returned.
type: boolean
controller:
description: If true, this reference points to the managing
controller.
type: boolean
kind:
- description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind of the referent.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
- description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names'
+ description: |-
+ Name of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names
type: string
uid:
- description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids'
+ description: |-
+ UID of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids
type: string
required:
- apiVersion
@@ -253,19 +279,16 @@ spec:
x-kubernetes-list-type: map
type: object
providerID:
- description: ProviderID is the identification ID of the machine provided
- by the provider. This field must match the provider ID as seen on
- the node object corresponding to this machine. This field is required
- by higher level consumers of cluster-api. Example use case is cluster
- autoscaler with cluster-api as provider. Clean-up logic in the autoscaler
- compares machines to nodes to find out machines at provider which
- could not get registered as Kubernetes nodes. With cluster-api as
- a generic out-of-tree provider for autoscaler, this field is required
- by autoscaler to be able to have a provider view of the list of
- machines. Another list of nodes is queried from the k8s apiserver
- and then a comparison is done to find out unregistered machines
- and are marked for delete. This field will be set by the actuators
- and consumed by higher level entities like autoscaler that will
+ description: |-
+ ProviderID is the identification ID of the machine provided by the provider.
+ This field must match the provider ID as seen on the node object corresponding to this machine.
+ This field is required by higher level consumers of cluster-api. Example use case is cluster autoscaler
+ with cluster-api as provider. Clean-up logic in the autoscaler compares machines to nodes to find out
+ machines at provider which could not get registered as Kubernetes nodes. With cluster-api as a
+ generic out-of-tree provider for autoscaler, this field is required by autoscaler to be
+ able to have a provider view of the list of machines. Another list of nodes is queried from the k8s apiserver
+ and then a comparison is done to find out unregistered machines and are marked for delete.
+ This field will be set by the actuators and consumed by higher level entities like autoscaler that will
be interfacing with cluster-api as generic provider.
type: string
providerSpec:
@@ -273,36 +296,40 @@ spec:
to use during node creation.
properties:
value:
- description: Value is an inlined, serialized representation of
- the resource configuration. It is recommended that providers
- maintain their own versioned API types that should be serialized/deserialized
- from this field, akin to component config.
+ description: |-
+ Value is an inlined, serialized representation of the resource
+ configuration. It is recommended that providers maintain their own
+ versioned API types that should be serialized/deserialized from this
+ field, akin to component config.
type: object
x-kubernetes-preserve-unknown-fields: true
type: object
taints:
- description: The list of the taints to be applied to the corresponding
- Node in additive manner. This list will not overwrite any other
- taints added to the Node on an ongoing basis by other entities.
- These taints should be actively reconciled e.g. if you ask the machine
- controller to apply a taint and then manually remove the taint the
- machine controller will put it back) but not have the machine controller
+ description: |-
+ The list of the taints to be applied to the corresponding Node in additive
+ manner. This list will not overwrite any other taints added to the Node on
+ an ongoing basis by other entities. These taints should be actively reconciled
+ e.g. if you ask the machine controller to apply a taint and then manually remove
+ the taint the machine controller will put it back) but not have the machine controller
remove any taints
items:
- description: The node this Taint is attached to has the "effect"
- on any pod that does not tolerate the Taint.
+ description: |-
+ The node this Taint is attached to has the "effect" on
+ any pod that does not tolerate the Taint.
properties:
effect:
- description: Required. The effect of the taint on pods that
- do not tolerate the taint. Valid effects are NoSchedule, PreferNoSchedule
- and NoExecute.
+ description: |-
+ Required. The effect of the taint on pods
+ that do not tolerate the taint.
+ Valid effects are NoSchedule, PreferNoSchedule and NoExecute.
type: string
key:
description: Required. The taint key to be applied to a node.
type: string
timeAdded:
- description: TimeAdded represents the time at which the taint
- was added. It is only written for NoExecute taints.
+ description: |-
+ TimeAdded represents the time at which the taint was added.
+ It is only written for NoExecute taints.
format: date-time
type: string
value:
@@ -344,39 +371,41 @@ spec:
operational state.
properties:
lastTransitionTime:
- description: Last time the condition transitioned from one status
- to another. This should be when the underlying condition changed.
- If that is not known, then using the time when the API field
- changed is acceptable.
+ description: |-
+ Last time the condition transitioned from one status to another.
+ This should be when the underlying condition changed. If that is not known, then using the time when
+ the API field changed is acceptable.
format: date-time
type: string
message:
- description: A human readable message indicating details about
- the transition. This field may be empty.
+ description: |-
+ A human readable message indicating details about the transition.
+ This field may be empty.
type: string
reason:
- description: The reason for the condition's last transition
- in CamelCase. The specific API may choose whether or not this
- field is considered a guaranteed API. This field may not be
- empty.
+ description: |-
+ The reason for the condition's last transition in CamelCase.
+ The specific API may choose whether or not this field is considered a guaranteed API.
+ This field may not be empty.
type: string
severity:
- description: Severity provides an explicit classification of
- Reason code, so the users or machines can immediately understand
- the current situation and act accordingly. The Severity field
- MUST be set only when Status=False.
+ description: |-
+ Severity provides an explicit classification of Reason code, so the users or machines can immediately
+ understand the current situation and act accordingly.
+ The Severity field MUST be set only when Status=False.
type: string
status:
description: Status of the condition, one of True, False, Unknown.
type: string
type:
- description: Type of condition in CamelCase or in foo.example.com/CamelCase.
- Many .condition.type values are consistent across resources
- like Available, but because arbitrary conditions can be useful
- (see .node.status.conditions), the ability to deconflict is
- important.
+ description: |-
+ Type of condition in CamelCase or in foo.example.com/CamelCase.
+ Many .condition.type values are consistent across resources like Available, but because arbitrary conditions
+ can be useful (see .node.status.conditions), the ability to deconflict is important.
type: string
required:
+ - lastTransitionTime
+ - status
- type
type: object
type: array
@@ -384,41 +413,49 @@ spec:
- type
x-kubernetes-list-type: map
errorMessage:
- description: "ErrorMessage will be set in the event that there is
- a terminal problem reconciling the Machine and will contain a more
- verbose string suitable for logging and human consumption. \n This
- field should not be set for transitive errors that a controller
- faces that are expected to be fixed automatically over time (like
- service outages), but instead indicate that something is fundamentally
- wrong with the Machine's spec or the configuration of the controller,
- and that manual intervention is required. Examples of terminal errors
- would be invalid combinations of settings in the spec, values that
- are unsupported by the controller, or the responsible controller
- itself being critically misconfigured. \n Any transient errors that
- occur during the reconciliation of Machines can be added as events
- to the Machine object and/or logged in the controller's output."
+ description: |-
+ ErrorMessage will be set in the event that there is a terminal problem
+ reconciling the Machine and will contain a more verbose string suitable
+ for logging and human consumption.
+
+ This field should not be set for transitive errors that a controller
+ faces that are expected to be fixed automatically over
+ time (like service outages), but instead indicate that something is
+ fundamentally wrong with the Machine's spec or the configuration of
+ the controller, and that manual intervention is required. Examples
+ of terminal errors would be invalid combinations of settings in the
+ spec, values that are unsupported by the controller, or the
+ responsible controller itself being critically misconfigured.
+
+ Any transient errors that occur during the reconciliation of Machines
+ can be added as events to the Machine object and/or logged in the
+ controller's output.
type: string
errorReason:
- description: "ErrorReason will be set in the event that there is a
- terminal problem reconciling the Machine and will contain a succinct
- value suitable for machine interpretation. \n This field should
- not be set for transitive errors that a controller faces that are
- expected to be fixed automatically over time (like service outages),
- but instead indicate that something is fundamentally wrong with
- the Machine's spec or the configuration of the controller, and that
- manual intervention is required. Examples of terminal errors would
- be invalid combinations of settings in the spec, values that are
- unsupported by the controller, or the responsible controller itself
- being critically misconfigured. \n Any transient errors that occur
- during the reconciliation of Machines can be added as events to
- the Machine object and/or logged in the controller's output."
+ description: |-
+ ErrorReason will be set in the event that there is a terminal problem
+ reconciling the Machine and will contain a succinct value suitable
+ for machine interpretation.
+
+ This field should not be set for transitive errors that a controller
+ faces that are expected to be fixed automatically over
+ time (like service outages), but instead indicate that something is
+ fundamentally wrong with the Machine's spec or the configuration of
+ the controller, and that manual intervention is required. Examples
+ of terminal errors would be invalid combinations of settings in the
+ spec, values that are unsupported by the controller, or the
+ responsible controller itself being critically misconfigured.
+
+ Any transient errors that occur during the reconciliation of Machines
+ can be added as events to the Machine object and/or logged in the
+ controller's output.
type: string
lastOperation:
- description: LastOperation describes the last-operation performed
- by the machine-controller. This API should be useful as a history
- in terms of the latest operation performed on the specific machine.
- It should also convey the state of the latest-operation for example
- if it is still on-going, failed or completed successfully.
+ description: |-
+ LastOperation describes the last-operation performed by the machine-controller.
+ This API should be useful as a history in terms of the latest operation performed on the
+ specific machine. It should also convey the state of the latest-operation for example if
+ it is still on-going, failed or completed successfully.
properties:
description:
description: Description is the human-readable description of
@@ -430,11 +467,13 @@ spec:
format: date-time
type: string
state:
- description: State is the current status of the last performed
- operation. E.g. Processing, Failed, Successful etc
+ description: |-
+ State is the current status of the last performed operation.
+ E.g. Processing, Failed, Successful etc
type: string
type:
- description: Type is the type of operation which was last performed.
+ description: |-
+ Type is the type of operation which was last performed.
E.g. Create, Delete, Update etc
type: string
type: object
@@ -449,44 +488,53 @@ spec:
description: API version of the referent.
type: string
fieldPath:
- description: 'If referring to a piece of an object instead of
- an entire object, this string should contain a valid JSON/Go
- field access statement, such as desiredState.manifest.containers[2].
- For example, if the object reference is to a container within
- a pod, this would take on a value like: "spec.containers{name}"
- (where "name" refers to the name of the container that triggered
- the event) or if no container name is specified "spec.containers[2]"
- (container with index 2 in this pod). This syntax is chosen
- only to have some well-defined way of referencing a part of
- an object. TODO: this design is not final and this field is
- subject to change in the future.'
+ description: |-
+ If referring to a piece of an object instead of an entire object, this string
+ should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
+ For example, if the object reference is to a container within a pod, this would take on a value like:
+ "spec.containers{name}" (where "name" refers to the name of the container that triggered
+ the event) or if no container name is specified "spec.containers[2]" (container with
+ index 2 in this pod). This syntax is chosen only to have some well-defined way of
+ referencing a part of an object.
type: string
kind:
- description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind of the referent.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
- description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
+ description: |-
+ Name of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
type: string
namespace:
- description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
+ description: |-
+ Namespace of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
type: string
resourceVersion:
- description: 'Specific resourceVersion to which this reference
- is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency'
+ description: |-
+ Specific resourceVersion to which this reference is made, if any.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
type: string
uid:
- description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids'
+ description: |-
+ UID of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
type: string
type: object
x-kubernetes-map-type: atomic
phase:
- description: 'Phase represents the current phase of machine actuation.
- One of: Failed, Provisioning, Provisioned, Running, Deleting'
+ description: |-
+ Phase represents the current phase of machine actuation.
+ One of: Failed, Provisioning, Provisioned, Running, Deleting
type: string
providerStatus:
- description: ProviderStatus details a Provider-specific status. It
- is recommended that providers maintain their own versioned API types
- that should be serialized/deserialized from this field.
+ description: |-
+ ProviderStatus details a Provider-specific status.
+ It is recommended that providers maintain their
+ own versioned API types that should be
+ serialized/deserialized from this field.
type: object
x-kubernetes-preserve-unknown-fields: true
type: object
diff --git a/install/0000_30_machine-api-operator_02_machine.DevPreviewNoUpgrade.crd.yaml b/install/0000_30_machine-api-operator_02_machine.DevPreviewNoUpgrade.crd.yaml
index 24029627c71e3a39baeb3d4b1af2644e3975ca84..5d6070f8f52cc456d77506ee33e4082c791bcb9e 100644
--- a/install/0000_30_machine-api-operator_02_machine.DevPreviewNoUpgrade.crd.yaml
+++ b/install/0000_30_machine-api-operator_02_machine.DevPreviewNoUpgrade.crd.yaml
@@ -57,19 +57,24 @@ spec:
name: v1beta1
schema:
openAPIV3Schema:
- description: 'Machine is the Schema for the machines API Compatibility level
- 2: Stable within a major release for a minimum of 9 months or 3 minor releases
- (whichever is longer).'
+ description: |-
+ Machine is the Schema for the machines API
+ Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -77,31 +82,34 @@ spec:
description: MachineSpec defines the desired state of Machine
properties:
lifecycleHooks:
- description: LifecycleHooks allow users to pause operations on the
- machine at certain predefined points within the machine lifecycle.
+ description: |-
+ LifecycleHooks allow users to pause operations on the machine at
+ certain predefined points within the machine lifecycle.
properties:
preDrain:
- description: PreDrain hooks prevent the machine from being drained.
+ description: |-
+ PreDrain hooks prevent the machine from being drained.
This also blocks further lifecycle events, such as termination.
items:
description: LifecycleHook represents a single instance of a
lifecycle hook
properties:
name:
- description: Name defines a unique name for the lifcycle
- hook. The name should be unique and descriptive, ideally
- 1-3 words, in CamelCase or it may be namespaced, eg. foo.example.com/CamelCase.
- Names must be unique and should only be managed by a single
- entity.
+ description: |-
+ Name defines a unique name for the lifcycle hook.
+ The name should be unique and descriptive, ideally 1-3 words, in CamelCase or
+ it may be namespaced, eg. foo.example.com/CamelCase.
+ Names must be unique and should only be managed by a single entity.
maxLength: 256
minLength: 3
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
owner:
- description: Owner defines the owner of the lifecycle hook.
+ description: |-
+ Owner defines the owner of the lifecycle hook.
This should be descriptive enough so that users can identify
- who/what is responsible for blocking the lifecycle. This
- could be the name of a controller (e.g. clusteroperator/etcd)
+ who/what is responsible for blocking the lifecycle.
+ This could be the name of a controller (e.g. clusteroperator/etcd)
or an administrator managing the hook.
maxLength: 512
minLength: 3
@@ -115,28 +123,29 @@ spec:
- name
x-kubernetes-list-type: map
preTerminate:
- description: PreTerminate hooks prevent the machine from being
- terminated. PreTerminate hooks be actioned after the Machine
- has been drained.
+ description: |-
+ PreTerminate hooks prevent the machine from being terminated.
+ PreTerminate hooks be actioned after the Machine has been drained.
items:
description: LifecycleHook represents a single instance of a
lifecycle hook
properties:
name:
- description: Name defines a unique name for the lifcycle
- hook. The name should be unique and descriptive, ideally
- 1-3 words, in CamelCase or it may be namespaced, eg. foo.example.com/CamelCase.
- Names must be unique and should only be managed by a single
- entity.
+ description: |-
+ Name defines a unique name for the lifcycle hook.
+ The name should be unique and descriptive, ideally 1-3 words, in CamelCase or
+ it may be namespaced, eg. foo.example.com/CamelCase.
+ Names must be unique and should only be managed by a single entity.
maxLength: 256
minLength: 3
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
owner:
- description: Owner defines the owner of the lifecycle hook.
+ description: |-
+ Owner defines the owner of the lifecycle hook.
This should be descriptive enough so that users can identify
- who/what is responsible for blocking the lifecycle. This
- could be the name of a controller (e.g. clusteroperator/etcd)
+ who/what is responsible for blocking the lifecycle.
+ This could be the name of a controller (e.g. clusteroperator/etcd)
or an administrator managing the hook.
maxLength: 512
minLength: 3
@@ -151,94 +160,111 @@ spec:
x-kubernetes-list-type: map
type: object
metadata:
- description: ObjectMeta will autopopulate the Node created. Use this
- to indicate what labels, annotations, name prefix, etc., should
- be used when creating the Node.
+ description: |-
+ ObjectMeta will autopopulate the Node created. Use this to
+ indicate what labels, annotations, name prefix, etc., should be used
+ when creating the Node.
properties:
annotations:
additionalProperties:
type: string
- description: 'Annotations is an unstructured key value map stored
- with a resource that may be set by external tools to store and
- retrieve arbitrary metadata. They are not queryable and should
- be preserved when modifying objects. More info: http://kubernetes.io/docs/user-guide/annotations'
+ description: |-
+ Annotations is an unstructured key value map stored with a resource that may be
+ set by external tools to store and retrieve arbitrary metadata. They are not
+ queryable and should be preserved when modifying objects.
+ More info: http://kubernetes.io/docs/user-guide/annotations
type: object
generateName:
- description: "GenerateName is an optional prefix, used by the
- server, to generate a unique name ONLY IF the Name field has
- not been provided. If this field is used, the name returned
- to the client will be different than the name passed. This value
- will also be combined with a unique suffix. The provided value
- has the same validation rules as the Name field, and may be
- truncated by the length of the suffix required to make the value
- unique on the server. \n If this field is specified and the
- generated name exists, the server will NOT return a 409 - instead,
- it will either return 201 Created or 500 with Reason ServerTimeout
- indicating a unique name could not be found in the time allotted,
- and the client should retry (optionally after the time indicated
- in the Retry-After header). \n Applied only if Name is not specified.
- More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency"
+ description: |-
+ GenerateName is an optional prefix, used by the server, to generate a unique
+ name ONLY IF the Name field has not been provided.
+ If this field is used, the name returned to the client will be different
+ than the name passed. This value will also be combined with a unique suffix.
+ The provided value has the same validation rules as the Name field,
+ and may be truncated by the length of the suffix required to make the value
+ unique on the server.
+
+ If this field is specified and the generated name exists, the server will
+ NOT return a 409 - instead, it will either return 201 Created or 500 with Reason
+ ServerTimeout indicating a unique name could not be found in the time allotted, and the client
+ should retry (optionally after the time indicated in the Retry-After header).
+
+ Applied only if Name is not specified.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
type: string
labels:
additionalProperties:
type: string
- description: 'Map of string keys and values that can be used to
- organize and categorize (scope and select) objects. May match
- selectors of replication controllers and services. More info:
- http://kubernetes.io/docs/user-guide/labels'
+ description: |-
+ Map of string keys and values that can be used to organize and categorize
+ (scope and select) objects. May match selectors of replication controllers
+ and services.
+ More info: http://kubernetes.io/docs/user-guide/labels
type: object
name:
- description: 'Name must be unique within a namespace. Is required
- when creating resources, although some resources may allow a
- client to request the generation of an appropriate name automatically.
- Name is primarily intended for creation idempotence and configuration
- definition. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/identifiers#names'
+ description: |-
+ Name must be unique within a namespace. Is required when creating resources, although
+ some resources may allow a client to request the generation of an appropriate name
+ automatically. Name is primarily intended for creation idempotence and configuration
+ definition.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/identifiers#names
type: string
namespace:
- description: "Namespace defines the space within each name must
- be unique. An empty namespace is equivalent to the \"default\"
- namespace, but \"default\" is the canonical representation.
- Not all objects are required to be scoped to a namespace - the
- value of this field for those objects will be empty. \n Must
- be a DNS_LABEL. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/namespaces"
+ description: |-
+ Namespace defines the space within each name must be unique. An empty namespace is
+ equivalent to the "default" namespace, but "default" is the canonical representation.
+ Not all objects are required to be scoped to a namespace - the value of this field for
+ those objects will be empty.
+
+ Must be a DNS_LABEL.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/namespaces
type: string
ownerReferences:
- description: List of objects depended by this object. If ALL objects
- in the list have been deleted, this object will be garbage collected.
- If this object is managed by a controller, then an entry in
- this list will point to this controller, with the controller
- field set to true. There cannot be more than one managing controller.
+ description: |-
+ List of objects depended by this object. If ALL objects in the list have
+ been deleted, this object will be garbage collected. If this object is managed by a controller,
+ then an entry in this list will point to this controller, with the controller field set to true.
+ There cannot be more than one managing controller.
items:
- description: OwnerReference contains enough information to let
- you identify an owning object. An owning object must be in
- the same namespace as the dependent, or be cluster-scoped,
- so there is no namespace field.
+ description: |-
+ OwnerReference contains enough information to let you identify an owning
+ object. An owning object must be in the same namespace as the dependent, or
+ be cluster-scoped, so there is no namespace field.
properties:
apiVersion:
description: API version of the referent.
type: string
blockOwnerDeletion:
- description: If true, AND if the owner has the "foregroundDeletion"
- finalizer, then the owner cannot be deleted from the key-value
- store until this reference is removed. See https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
- for how the garbage collector interacts with this field
- and enforces the foreground deletion. Defaults to false.
- To set this field, a user needs "delete" permission of
- the owner, otherwise 422 (Unprocessable Entity) will be
- returned.
+ description: |-
+ If true, AND if the owner has the "foregroundDeletion" finalizer, then
+ the owner cannot be deleted from the key-value store until this
+ reference is removed.
+ See https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
+ for how the garbage collector interacts with this field and enforces the foreground deletion.
+ Defaults to false.
+ To set this field, a user needs "delete" permission of the owner,
+ otherwise 422 (Unprocessable Entity) will be returned.
type: boolean
controller:
description: If true, this reference points to the managing
controller.
type: boolean
kind:
- description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind of the referent.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
- description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names'
+ description: |-
+ Name of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names
type: string
uid:
- description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids'
+ description: |-
+ UID of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids
type: string
required:
- apiVersion
@@ -253,19 +279,16 @@ spec:
x-kubernetes-list-type: map
type: object
providerID:
- description: ProviderID is the identification ID of the machine provided
- by the provider. This field must match the provider ID as seen on
- the node object corresponding to this machine. This field is required
- by higher level consumers of cluster-api. Example use case is cluster
- autoscaler with cluster-api as provider. Clean-up logic in the autoscaler
- compares machines to nodes to find out machines at provider which
- could not get registered as Kubernetes nodes. With cluster-api as
- a generic out-of-tree provider for autoscaler, this field is required
- by autoscaler to be able to have a provider view of the list of
- machines. Another list of nodes is queried from the k8s apiserver
- and then a comparison is done to find out unregistered machines
- and are marked for delete. This field will be set by the actuators
- and consumed by higher level entities like autoscaler that will
+ description: |-
+ ProviderID is the identification ID of the machine provided by the provider.
+ This field must match the provider ID as seen on the node object corresponding to this machine.
+ This field is required by higher level consumers of cluster-api. Example use case is cluster autoscaler
+ with cluster-api as provider. Clean-up logic in the autoscaler compares machines to nodes to find out
+ machines at provider which could not get registered as Kubernetes nodes. With cluster-api as a
+ generic out-of-tree provider for autoscaler, this field is required by autoscaler to be
+ able to have a provider view of the list of machines. Another list of nodes is queried from the k8s apiserver
+ and then a comparison is done to find out unregistered machines and are marked for delete.
+ This field will be set by the actuators and consumed by higher level entities like autoscaler that will
be interfacing with cluster-api as generic provider.
type: string
providerSpec:
@@ -273,36 +296,40 @@ spec:
to use during node creation.
properties:
value:
- description: Value is an inlined, serialized representation of
- the resource configuration. It is recommended that providers
- maintain their own versioned API types that should be serialized/deserialized
- from this field, akin to component config.
+ description: |-
+ Value is an inlined, serialized representation of the resource
+ configuration. It is recommended that providers maintain their own
+ versioned API types that should be serialized/deserialized from this
+ field, akin to component config.
type: object
x-kubernetes-preserve-unknown-fields: true
type: object
taints:
- description: The list of the taints to be applied to the corresponding
- Node in additive manner. This list will not overwrite any other
- taints added to the Node on an ongoing basis by other entities.
- These taints should be actively reconciled e.g. if you ask the machine
- controller to apply a taint and then manually remove the taint the
- machine controller will put it back) but not have the machine controller
+ description: |-
+ The list of the taints to be applied to the corresponding Node in additive
+ manner. This list will not overwrite any other taints added to the Node on
+ an ongoing basis by other entities. These taints should be actively reconciled
+ e.g. if you ask the machine controller to apply a taint and then manually remove
+ the taint the machine controller will put it back) but not have the machine controller
remove any taints
items:
- description: The node this Taint is attached to has the "effect"
- on any pod that does not tolerate the Taint.
+ description: |-
+ The node this Taint is attached to has the "effect" on
+ any pod that does not tolerate the Taint.
properties:
effect:
- description: Required. The effect of the taint on pods that
- do not tolerate the taint. Valid effects are NoSchedule, PreferNoSchedule
- and NoExecute.
+ description: |-
+ Required. The effect of the taint on pods
+ that do not tolerate the taint.
+ Valid effects are NoSchedule, PreferNoSchedule and NoExecute.
type: string
key:
description: Required. The taint key to be applied to a node.
type: string
timeAdded:
- description: TimeAdded represents the time at which the taint
- was added. It is only written for NoExecute taints.
+ description: |-
+ TimeAdded represents the time at which the taint was added.
+ It is only written for NoExecute taints.
format: date-time
type: string
value:
@@ -344,39 +371,41 @@ spec:
operational state.
properties:
lastTransitionTime:
- description: Last time the condition transitioned from one status
- to another. This should be when the underlying condition changed.
- If that is not known, then using the time when the API field
- changed is acceptable.
+ description: |-
+ Last time the condition transitioned from one status to another.
+ This should be when the underlying condition changed. If that is not known, then using the time when
+ the API field changed is acceptable.
format: date-time
type: string
message:
- description: A human readable message indicating details about
- the transition. This field may be empty.
+ description: |-
+ A human readable message indicating details about the transition.
+ This field may be empty.
type: string
reason:
- description: The reason for the condition's last transition
- in CamelCase. The specific API may choose whether or not this
- field is considered a guaranteed API. This field may not be
- empty.
+ description: |-
+ The reason for the condition's last transition in CamelCase.
+ The specific API may choose whether or not this field is considered a guaranteed API.
+ This field may not be empty.
type: string
severity:
- description: Severity provides an explicit classification of
- Reason code, so the users or machines can immediately understand
- the current situation and act accordingly. The Severity field
- MUST be set only when Status=False.
+ description: |-
+ Severity provides an explicit classification of Reason code, so the users or machines can immediately
+ understand the current situation and act accordingly.
+ The Severity field MUST be set only when Status=False.
type: string
status:
description: Status of the condition, one of True, False, Unknown.
type: string
type:
- description: Type of condition in CamelCase or in foo.example.com/CamelCase.
- Many .condition.type values are consistent across resources
- like Available, but because arbitrary conditions can be useful
- (see .node.status.conditions), the ability to deconflict is
- important.
+ description: |-
+ Type of condition in CamelCase or in foo.example.com/CamelCase.
+ Many .condition.type values are consistent across resources like Available, but because arbitrary conditions
+ can be useful (see .node.status.conditions), the ability to deconflict is important.
type: string
required:
+ - lastTransitionTime
+ - status
- type
type: object
type: array
@@ -384,41 +413,49 @@ spec:
- type
x-kubernetes-list-type: map
errorMessage:
- description: "ErrorMessage will be set in the event that there is
- a terminal problem reconciling the Machine and will contain a more
- verbose string suitable for logging and human consumption. \n This
- field should not be set for transitive errors that a controller
- faces that are expected to be fixed automatically over time (like
- service outages), but instead indicate that something is fundamentally
- wrong with the Machine's spec or the configuration of the controller,
- and that manual intervention is required. Examples of terminal errors
- would be invalid combinations of settings in the spec, values that
- are unsupported by the controller, or the responsible controller
- itself being critically misconfigured. \n Any transient errors that
- occur during the reconciliation of Machines can be added as events
- to the Machine object and/or logged in the controller's output."
+ description: |-
+ ErrorMessage will be set in the event that there is a terminal problem
+ reconciling the Machine and will contain a more verbose string suitable
+ for logging and human consumption.
+
+ This field should not be set for transitive errors that a controller
+ faces that are expected to be fixed automatically over
+ time (like service outages), but instead indicate that something is
+ fundamentally wrong with the Machine's spec or the configuration of
+ the controller, and that manual intervention is required. Examples
+ of terminal errors would be invalid combinations of settings in the
+ spec, values that are unsupported by the controller, or the
+ responsible controller itself being critically misconfigured.
+
+ Any transient errors that occur during the reconciliation of Machines
+ can be added as events to the Machine object and/or logged in the
+ controller's output.
type: string
errorReason:
- description: "ErrorReason will be set in the event that there is a
- terminal problem reconciling the Machine and will contain a succinct
- value suitable for machine interpretation. \n This field should
- not be set for transitive errors that a controller faces that are
- expected to be fixed automatically over time (like service outages),
- but instead indicate that something is fundamentally wrong with
- the Machine's spec or the configuration of the controller, and that
- manual intervention is required. Examples of terminal errors would
- be invalid combinations of settings in the spec, values that are
- unsupported by the controller, or the responsible controller itself
- being critically misconfigured. \n Any transient errors that occur
- during the reconciliation of Machines can be added as events to
- the Machine object and/or logged in the controller's output."
+ description: |-
+ ErrorReason will be set in the event that there is a terminal problem
+ reconciling the Machine and will contain a succinct value suitable
+ for machine interpretation.
+
+ This field should not be set for transitive errors that a controller
+ faces that are expected to be fixed automatically over
+ time (like service outages), but instead indicate that something is
+ fundamentally wrong with the Machine's spec or the configuration of
+ the controller, and that manual intervention is required. Examples
+ of terminal errors would be invalid combinations of settings in the
+ spec, values that are unsupported by the controller, or the
+ responsible controller itself being critically misconfigured.
+
+ Any transient errors that occur during the reconciliation of Machines
+ can be added as events to the Machine object and/or logged in the
+ controller's output.
type: string
lastOperation:
- description: LastOperation describes the last-operation performed
- by the machine-controller. This API should be useful as a history
- in terms of the latest operation performed on the specific machine.
- It should also convey the state of the latest-operation for example
- if it is still on-going, failed or completed successfully.
+ description: |-
+ LastOperation describes the last-operation performed by the machine-controller.
+ This API should be useful as a history in terms of the latest operation performed on the
+ specific machine. It should also convey the state of the latest-operation for example if
+ it is still on-going, failed or completed successfully.
properties:
description:
description: Description is the human-readable description of
@@ -430,11 +467,13 @@ spec:
format: date-time
type: string
state:
- description: State is the current status of the last performed
- operation. E.g. Processing, Failed, Successful etc
+ description: |-
+ State is the current status of the last performed operation.
+ E.g. Processing, Failed, Successful etc
type: string
type:
- description: Type is the type of operation which was last performed.
+ description: |-
+ Type is the type of operation which was last performed.
E.g. Create, Delete, Update etc
type: string
type: object
@@ -449,44 +488,53 @@ spec:
description: API version of the referent.
type: string
fieldPath:
- description: 'If referring to a piece of an object instead of
- an entire object, this string should contain a valid JSON/Go
- field access statement, such as desiredState.manifest.containers[2].
- For example, if the object reference is to a container within
- a pod, this would take on a value like: "spec.containers{name}"
- (where "name" refers to the name of the container that triggered
- the event) or if no container name is specified "spec.containers[2]"
- (container with index 2 in this pod). This syntax is chosen
- only to have some well-defined way of referencing a part of
- an object. TODO: this design is not final and this field is
- subject to change in the future.'
+ description: |-
+ If referring to a piece of an object instead of an entire object, this string
+ should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
+ For example, if the object reference is to a container within a pod, this would take on a value like:
+ "spec.containers{name}" (where "name" refers to the name of the container that triggered
+ the event) or if no container name is specified "spec.containers[2]" (container with
+ index 2 in this pod). This syntax is chosen only to have some well-defined way of
+ referencing a part of an object.
type: string
kind:
- description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind of the referent.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
- description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
+ description: |-
+ Name of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
type: string
namespace:
- description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
+ description: |-
+ Namespace of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
type: string
resourceVersion:
- description: 'Specific resourceVersion to which this reference
- is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency'
+ description: |-
+ Specific resourceVersion to which this reference is made, if any.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
type: string
uid:
- description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids'
+ description: |-
+ UID of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
type: string
type: object
x-kubernetes-map-type: atomic
phase:
- description: 'Phase represents the current phase of machine actuation.
- One of: Failed, Provisioning, Provisioned, Running, Deleting'
+ description: |-
+ Phase represents the current phase of machine actuation.
+ One of: Failed, Provisioning, Provisioned, Running, Deleting
type: string
providerStatus:
- description: ProviderStatus details a Provider-specific status. It
- is recommended that providers maintain their own versioned API types
- that should be serialized/deserialized from this field.
+ description: |-
+ ProviderStatus details a Provider-specific status.
+ It is recommended that providers maintain their
+ own versioned API types that should be
+ serialized/deserialized from this field.
type: object
x-kubernetes-preserve-unknown-fields: true
type: object
diff --git a/install/0000_30_machine-api-operator_02_machine.TechPreviewNoUpgrade.crd.yaml b/install/0000_30_machine-api-operator_02_machine.TechPreviewNoUpgrade.crd.yaml
index f441da306d9c7f13d57be812c16af9e36d826b44..ca7cbe14eaba7965f32f2750ff02b46322c371c8 100644
--- a/install/0000_30_machine-api-operator_02_machine.TechPreviewNoUpgrade.crd.yaml
+++ b/install/0000_30_machine-api-operator_02_machine.TechPreviewNoUpgrade.crd.yaml
@@ -57,19 +57,24 @@ spec:
name: v1beta1
schema:
openAPIV3Schema:
- description: 'Machine is the Schema for the machines API Compatibility level
- 2: Stable within a major release for a minimum of 9 months or 3 minor releases
- (whichever is longer).'
+ description: |-
+ Machine is the Schema for the machines API
+ Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -77,31 +82,34 @@ spec:
description: MachineSpec defines the desired state of Machine
properties:
lifecycleHooks:
- description: LifecycleHooks allow users to pause operations on the
- machine at certain predefined points within the machine lifecycle.
+ description: |-
+ LifecycleHooks allow users to pause operations on the machine at
+ certain predefined points within the machine lifecycle.
properties:
preDrain:
- description: PreDrain hooks prevent the machine from being drained.
+ description: |-
+ PreDrain hooks prevent the machine from being drained.
This also blocks further lifecycle events, such as termination.
items:
description: LifecycleHook represents a single instance of a
lifecycle hook
properties:
name:
- description: Name defines a unique name for the lifcycle
- hook. The name should be unique and descriptive, ideally
- 1-3 words, in CamelCase or it may be namespaced, eg. foo.example.com/CamelCase.
- Names must be unique and should only be managed by a single
- entity.
+ description: |-
+ Name defines a unique name for the lifcycle hook.
+ The name should be unique and descriptive, ideally 1-3 words, in CamelCase or
+ it may be namespaced, eg. foo.example.com/CamelCase.
+ Names must be unique and should only be managed by a single entity.
maxLength: 256
minLength: 3
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
owner:
- description: Owner defines the owner of the lifecycle hook.
+ description: |-
+ Owner defines the owner of the lifecycle hook.
This should be descriptive enough so that users can identify
- who/what is responsible for blocking the lifecycle. This
- could be the name of a controller (e.g. clusteroperator/etcd)
+ who/what is responsible for blocking the lifecycle.
+ This could be the name of a controller (e.g. clusteroperator/etcd)
or an administrator managing the hook.
maxLength: 512
minLength: 3
@@ -115,28 +123,29 @@ spec:
- name
x-kubernetes-list-type: map
preTerminate:
- description: PreTerminate hooks prevent the machine from being
- terminated. PreTerminate hooks be actioned after the Machine
- has been drained.
+ description: |-
+ PreTerminate hooks prevent the machine from being terminated.
+ PreTerminate hooks be actioned after the Machine has been drained.
items:
description: LifecycleHook represents a single instance of a
lifecycle hook
properties:
name:
- description: Name defines a unique name for the lifcycle
- hook. The name should be unique and descriptive, ideally
- 1-3 words, in CamelCase or it may be namespaced, eg. foo.example.com/CamelCase.
- Names must be unique and should only be managed by a single
- entity.
+ description: |-
+ Name defines a unique name for the lifcycle hook.
+ The name should be unique and descriptive, ideally 1-3 words, in CamelCase or
+ it may be namespaced, eg. foo.example.com/CamelCase.
+ Names must be unique and should only be managed by a single entity.
maxLength: 256
minLength: 3
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
owner:
- description: Owner defines the owner of the lifecycle hook.
+ description: |-
+ Owner defines the owner of the lifecycle hook.
This should be descriptive enough so that users can identify
- who/what is responsible for blocking the lifecycle. This
- could be the name of a controller (e.g. clusteroperator/etcd)
+ who/what is responsible for blocking the lifecycle.
+ This could be the name of a controller (e.g. clusteroperator/etcd)
or an administrator managing the hook.
maxLength: 512
minLength: 3
@@ -151,94 +160,111 @@ spec:
x-kubernetes-list-type: map
type: object
metadata:
- description: ObjectMeta will autopopulate the Node created. Use this
- to indicate what labels, annotations, name prefix, etc., should
- be used when creating the Node.
+ description: |-
+ ObjectMeta will autopopulate the Node created. Use this to
+ indicate what labels, annotations, name prefix, etc., should be used
+ when creating the Node.
properties:
annotations:
additionalProperties:
type: string
- description: 'Annotations is an unstructured key value map stored
- with a resource that may be set by external tools to store and
- retrieve arbitrary metadata. They are not queryable and should
- be preserved when modifying objects. More info: http://kubernetes.io/docs/user-guide/annotations'
+ description: |-
+ Annotations is an unstructured key value map stored with a resource that may be
+ set by external tools to store and retrieve arbitrary metadata. They are not
+ queryable and should be preserved when modifying objects.
+ More info: http://kubernetes.io/docs/user-guide/annotations
type: object
generateName:
- description: "GenerateName is an optional prefix, used by the
- server, to generate a unique name ONLY IF the Name field has
- not been provided. If this field is used, the name returned
- to the client will be different than the name passed. This value
- will also be combined with a unique suffix. The provided value
- has the same validation rules as the Name field, and may be
- truncated by the length of the suffix required to make the value
- unique on the server. \n If this field is specified and the
- generated name exists, the server will NOT return a 409 - instead,
- it will either return 201 Created or 500 with Reason ServerTimeout
- indicating a unique name could not be found in the time allotted,
- and the client should retry (optionally after the time indicated
- in the Retry-After header). \n Applied only if Name is not specified.
- More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency"
+ description: |-
+ GenerateName is an optional prefix, used by the server, to generate a unique
+ name ONLY IF the Name field has not been provided.
+ If this field is used, the name returned to the client will be different
+ than the name passed. This value will also be combined with a unique suffix.
+ The provided value has the same validation rules as the Name field,
+ and may be truncated by the length of the suffix required to make the value
+ unique on the server.
+
+ If this field is specified and the generated name exists, the server will
+ NOT return a 409 - instead, it will either return 201 Created or 500 with Reason
+ ServerTimeout indicating a unique name could not be found in the time allotted, and the client
+ should retry (optionally after the time indicated in the Retry-After header).
+
+ Applied only if Name is not specified.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
type: string
labels:
additionalProperties:
type: string
- description: 'Map of string keys and values that can be used to
- organize and categorize (scope and select) objects. May match
- selectors of replication controllers and services. More info:
- http://kubernetes.io/docs/user-guide/labels'
+ description: |-
+ Map of string keys and values that can be used to organize and categorize
+ (scope and select) objects. May match selectors of replication controllers
+ and services.
+ More info: http://kubernetes.io/docs/user-guide/labels
type: object
name:
- description: 'Name must be unique within a namespace. Is required
- when creating resources, although some resources may allow a
- client to request the generation of an appropriate name automatically.
- Name is primarily intended for creation idempotence and configuration
- definition. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/identifiers#names'
+ description: |-
+ Name must be unique within a namespace. Is required when creating resources, although
+ some resources may allow a client to request the generation of an appropriate name
+ automatically. Name is primarily intended for creation idempotence and configuration
+ definition.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/identifiers#names
type: string
namespace:
- description: "Namespace defines the space within each name must
- be unique. An empty namespace is equivalent to the \"default\"
- namespace, but \"default\" is the canonical representation.
- Not all objects are required to be scoped to a namespace - the
- value of this field for those objects will be empty. \n Must
- be a DNS_LABEL. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/namespaces"
+ description: |-
+ Namespace defines the space within each name must be unique. An empty namespace is
+ equivalent to the "default" namespace, but "default" is the canonical representation.
+ Not all objects are required to be scoped to a namespace - the value of this field for
+ those objects will be empty.
+
+ Must be a DNS_LABEL.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/namespaces
type: string
ownerReferences:
- description: List of objects depended by this object. If ALL objects
- in the list have been deleted, this object will be garbage collected.
- If this object is managed by a controller, then an entry in
- this list will point to this controller, with the controller
- field set to true. There cannot be more than one managing controller.
+ description: |-
+ List of objects depended by this object. If ALL objects in the list have
+ been deleted, this object will be garbage collected. If this object is managed by a controller,
+ then an entry in this list will point to this controller, with the controller field set to true.
+ There cannot be more than one managing controller.
items:
- description: OwnerReference contains enough information to let
- you identify an owning object. An owning object must be in
- the same namespace as the dependent, or be cluster-scoped,
- so there is no namespace field.
+ description: |-
+ OwnerReference contains enough information to let you identify an owning
+ object. An owning object must be in the same namespace as the dependent, or
+ be cluster-scoped, so there is no namespace field.
properties:
apiVersion:
description: API version of the referent.
type: string
blockOwnerDeletion:
- description: If true, AND if the owner has the "foregroundDeletion"
- finalizer, then the owner cannot be deleted from the key-value
- store until this reference is removed. See https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
- for how the garbage collector interacts with this field
- and enforces the foreground deletion. Defaults to false.
- To set this field, a user needs "delete" permission of
- the owner, otherwise 422 (Unprocessable Entity) will be
- returned.
+ description: |-
+ If true, AND if the owner has the "foregroundDeletion" finalizer, then
+ the owner cannot be deleted from the key-value store until this
+ reference is removed.
+ See https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
+ for how the garbage collector interacts with this field and enforces the foreground deletion.
+ Defaults to false.
+ To set this field, a user needs "delete" permission of the owner,
+ otherwise 422 (Unprocessable Entity) will be returned.
type: boolean
controller:
description: If true, this reference points to the managing
controller.
type: boolean
kind:
- description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind of the referent.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
- description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names'
+ description: |-
+ Name of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names
type: string
uid:
- description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids'
+ description: |-
+ UID of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids
type: string
required:
- apiVersion
@@ -253,19 +279,16 @@ spec:
x-kubernetes-list-type: map
type: object
providerID:
- description: ProviderID is the identification ID of the machine provided
- by the provider. This field must match the provider ID as seen on
- the node object corresponding to this machine. This field is required
- by higher level consumers of cluster-api. Example use case is cluster
- autoscaler with cluster-api as provider. Clean-up logic in the autoscaler
- compares machines to nodes to find out machines at provider which
- could not get registered as Kubernetes nodes. With cluster-api as
- a generic out-of-tree provider for autoscaler, this field is required
- by autoscaler to be able to have a provider view of the list of
- machines. Another list of nodes is queried from the k8s apiserver
- and then a comparison is done to find out unregistered machines
- and are marked for delete. This field will be set by the actuators
- and consumed by higher level entities like autoscaler that will
+ description: |-
+ ProviderID is the identification ID of the machine provided by the provider.
+ This field must match the provider ID as seen on the node object corresponding to this machine.
+ This field is required by higher level consumers of cluster-api. Example use case is cluster autoscaler
+ with cluster-api as provider. Clean-up logic in the autoscaler compares machines to nodes to find out
+ machines at provider which could not get registered as Kubernetes nodes. With cluster-api as a
+ generic out-of-tree provider for autoscaler, this field is required by autoscaler to be
+ able to have a provider view of the list of machines. Another list of nodes is queried from the k8s apiserver
+ and then a comparison is done to find out unregistered machines and are marked for delete.
+ This field will be set by the actuators and consumed by higher level entities like autoscaler that will
be interfacing with cluster-api as generic provider.
type: string
providerSpec:
@@ -273,36 +296,40 @@ spec:
to use during node creation.
properties:
value:
- description: Value is an inlined, serialized representation of
- the resource configuration. It is recommended that providers
- maintain their own versioned API types that should be serialized/deserialized
- from this field, akin to component config.
+ description: |-
+ Value is an inlined, serialized representation of the resource
+ configuration. It is recommended that providers maintain their own
+ versioned API types that should be serialized/deserialized from this
+ field, akin to component config.
type: object
x-kubernetes-preserve-unknown-fields: true
type: object
taints:
- description: The list of the taints to be applied to the corresponding
- Node in additive manner. This list will not overwrite any other
- taints added to the Node on an ongoing basis by other entities.
- These taints should be actively reconciled e.g. if you ask the machine
- controller to apply a taint and then manually remove the taint the
- machine controller will put it back) but not have the machine controller
+ description: |-
+ The list of the taints to be applied to the corresponding Node in additive
+ manner. This list will not overwrite any other taints added to the Node on
+ an ongoing basis by other entities. These taints should be actively reconciled
+ e.g. if you ask the machine controller to apply a taint and then manually remove
+ the taint the machine controller will put it back) but not have the machine controller
remove any taints
items:
- description: The node this Taint is attached to has the "effect"
- on any pod that does not tolerate the Taint.
+ description: |-
+ The node this Taint is attached to has the "effect" on
+ any pod that does not tolerate the Taint.
properties:
effect:
- description: Required. The effect of the taint on pods that
- do not tolerate the taint. Valid effects are NoSchedule, PreferNoSchedule
- and NoExecute.
+ description: |-
+ Required. The effect of the taint on pods
+ that do not tolerate the taint.
+ Valid effects are NoSchedule, PreferNoSchedule and NoExecute.
type: string
key:
description: Required. The taint key to be applied to a node.
type: string
timeAdded:
- description: TimeAdded represents the time at which the taint
- was added. It is only written for NoExecute taints.
+ description: |-
+ TimeAdded represents the time at which the taint was added.
+ It is only written for NoExecute taints.
format: date-time
type: string
value:
@@ -344,39 +371,41 @@ spec:
operational state.
properties:
lastTransitionTime:
- description: Last time the condition transitioned from one status
- to another. This should be when the underlying condition changed.
- If that is not known, then using the time when the API field
- changed is acceptable.
+ description: |-
+ Last time the condition transitioned from one status to another.
+ This should be when the underlying condition changed. If that is not known, then using the time when
+ the API field changed is acceptable.
format: date-time
type: string
message:
- description: A human readable message indicating details about
- the transition. This field may be empty.
+ description: |-
+ A human readable message indicating details about the transition.
+ This field may be empty.
type: string
reason:
- description: The reason for the condition's last transition
- in CamelCase. The specific API may choose whether or not this
- field is considered a guaranteed API. This field may not be
- empty.
+ description: |-
+ The reason for the condition's last transition in CamelCase.
+ The specific API may choose whether or not this field is considered a guaranteed API.
+ This field may not be empty.
type: string
severity:
- description: Severity provides an explicit classification of
- Reason code, so the users or machines can immediately understand
- the current situation and act accordingly. The Severity field
- MUST be set only when Status=False.
+ description: |-
+ Severity provides an explicit classification of Reason code, so the users or machines can immediately
+ understand the current situation and act accordingly.
+ The Severity field MUST be set only when Status=False.
type: string
status:
description: Status of the condition, one of True, False, Unknown.
type: string
type:
- description: Type of condition in CamelCase or in foo.example.com/CamelCase.
- Many .condition.type values are consistent across resources
- like Available, but because arbitrary conditions can be useful
- (see .node.status.conditions), the ability to deconflict is
- important.
+ description: |-
+ Type of condition in CamelCase or in foo.example.com/CamelCase.
+ Many .condition.type values are consistent across resources like Available, but because arbitrary conditions
+ can be useful (see .node.status.conditions), the ability to deconflict is important.
type: string
required:
+ - lastTransitionTime
+ - status
- type
type: object
type: array
@@ -384,41 +413,49 @@ spec:
- type
x-kubernetes-list-type: map
errorMessage:
- description: "ErrorMessage will be set in the event that there is
- a terminal problem reconciling the Machine and will contain a more
- verbose string suitable for logging and human consumption. \n This
- field should not be set for transitive errors that a controller
- faces that are expected to be fixed automatically over time (like
- service outages), but instead indicate that something is fundamentally
- wrong with the Machine's spec or the configuration of the controller,
- and that manual intervention is required. Examples of terminal errors
- would be invalid combinations of settings in the spec, values that
- are unsupported by the controller, or the responsible controller
- itself being critically misconfigured. \n Any transient errors that
- occur during the reconciliation of Machines can be added as events
- to the Machine object and/or logged in the controller's output."
+ description: |-
+ ErrorMessage will be set in the event that there is a terminal problem
+ reconciling the Machine and will contain a more verbose string suitable
+ for logging and human consumption.
+
+ This field should not be set for transitive errors that a controller
+ faces that are expected to be fixed automatically over
+ time (like service outages), but instead indicate that something is
+ fundamentally wrong with the Machine's spec or the configuration of
+ the controller, and that manual intervention is required. Examples
+ of terminal errors would be invalid combinations of settings in the
+ spec, values that are unsupported by the controller, or the
+ responsible controller itself being critically misconfigured.
+
+ Any transient errors that occur during the reconciliation of Machines
+ can be added as events to the Machine object and/or logged in the
+ controller's output.
type: string
errorReason:
- description: "ErrorReason will be set in the event that there is a
- terminal problem reconciling the Machine and will contain a succinct
- value suitable for machine interpretation. \n This field should
- not be set for transitive errors that a controller faces that are
- expected to be fixed automatically over time (like service outages),
- but instead indicate that something is fundamentally wrong with
- the Machine's spec or the configuration of the controller, and that
- manual intervention is required. Examples of terminal errors would
- be invalid combinations of settings in the spec, values that are
- unsupported by the controller, or the responsible controller itself
- being critically misconfigured. \n Any transient errors that occur
- during the reconciliation of Machines can be added as events to
- the Machine object and/or logged in the controller's output."
+ description: |-
+ ErrorReason will be set in the event that there is a terminal problem
+ reconciling the Machine and will contain a succinct value suitable
+ for machine interpretation.
+
+ This field should not be set for transitive errors that a controller
+ faces that are expected to be fixed automatically over
+ time (like service outages), but instead indicate that something is
+ fundamentally wrong with the Machine's spec or the configuration of
+ the controller, and that manual intervention is required. Examples
+ of terminal errors would be invalid combinations of settings in the
+ spec, values that are unsupported by the controller, or the
+ responsible controller itself being critically misconfigured.
+
+ Any transient errors that occur during the reconciliation of Machines
+ can be added as events to the Machine object and/or logged in the
+ controller's output.
type: string
lastOperation:
- description: LastOperation describes the last-operation performed
- by the machine-controller. This API should be useful as a history
- in terms of the latest operation performed on the specific machine.
- It should also convey the state of the latest-operation for example
- if it is still on-going, failed or completed successfully.
+ description: |-
+ LastOperation describes the last-operation performed by the machine-controller.
+ This API should be useful as a history in terms of the latest operation performed on the
+ specific machine. It should also convey the state of the latest-operation for example if
+ it is still on-going, failed or completed successfully.
properties:
description:
description: Description is the human-readable description of
@@ -430,11 +467,13 @@ spec:
format: date-time
type: string
state:
- description: State is the current status of the last performed
- operation. E.g. Processing, Failed, Successful etc
+ description: |-
+ State is the current status of the last performed operation.
+ E.g. Processing, Failed, Successful etc
type: string
type:
- description: Type is the type of operation which was last performed.
+ description: |-
+ Type is the type of operation which was last performed.
E.g. Create, Delete, Update etc
type: string
type: object
@@ -449,44 +488,53 @@ spec:
description: API version of the referent.
type: string
fieldPath:
- description: 'If referring to a piece of an object instead of
- an entire object, this string should contain a valid JSON/Go
- field access statement, such as desiredState.manifest.containers[2].
- For example, if the object reference is to a container within
- a pod, this would take on a value like: "spec.containers{name}"
- (where "name" refers to the name of the container that triggered
- the event) or if no container name is specified "spec.containers[2]"
- (container with index 2 in this pod). This syntax is chosen
- only to have some well-defined way of referencing a part of
- an object. TODO: this design is not final and this field is
- subject to change in the future.'
+ description: |-
+ If referring to a piece of an object instead of an entire object, this string
+ should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
+ For example, if the object reference is to a container within a pod, this would take on a value like:
+ "spec.containers{name}" (where "name" refers to the name of the container that triggered
+ the event) or if no container name is specified "spec.containers[2]" (container with
+ index 2 in this pod). This syntax is chosen only to have some well-defined way of
+ referencing a part of an object.
type: string
kind:
- description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind of the referent.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
- description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
+ description: |-
+ Name of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
type: string
namespace:
- description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
+ description: |-
+ Namespace of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
type: string
resourceVersion:
- description: 'Specific resourceVersion to which this reference
- is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency'
+ description: |-
+ Specific resourceVersion to which this reference is made, if any.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
type: string
uid:
- description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids'
+ description: |-
+ UID of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
type: string
type: object
x-kubernetes-map-type: atomic
phase:
- description: 'Phase represents the current phase of machine actuation.
- One of: Failed, Provisioning, Provisioned, Running, Deleting'
+ description: |-
+ Phase represents the current phase of machine actuation.
+ One of: Failed, Provisioning, Provisioned, Running, Deleting
type: string
providerStatus:
- description: ProviderStatus details a Provider-specific status. It
- is recommended that providers maintain their own versioned API types
- that should be serialized/deserialized from this field.
+ description: |-
+ ProviderStatus details a Provider-specific status.
+ It is recommended that providers maintain their
+ own versioned API types that should be
+ serialized/deserialized from this field.
type: object
x-kubernetes-preserve-unknown-fields: true
type: object
diff --git a/install/0000_30_machine-api-operator_03_machineset.CustomNoUpgrade.crd.yaml b/install/0000_30_machine-api-operator_03_machineset.CustomNoUpgrade.crd.yaml
index 3841119fddcc96295f64ea7a234d737fa5ef81f4..48b77e0d955dc8be35c90aa9500607f0663da244 100644
--- a/install/0000_30_machine-api-operator_03_machineset.CustomNoUpgrade.crd.yaml
+++ b/install/0000_30_machine-api-operator_03_machineset.CustomNoUpgrade.crd.yaml
@@ -42,19 +42,24 @@ spec:
name: v1beta1
schema:
openAPIV3Schema:
- description: 'MachineSet ensures that a specified number of machines replicas
- are running at any given time. Compatibility level 2: Stable within a major
- release for a minimum of 9 months or 3 minor releases (whichever is longer).'
+ description: |-
+ MachineSet ensures that a specified number of machines replicas are running at any given time.
+ Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -62,73 +67,71 @@ spec:
description: MachineSetSpec defines the desired state of MachineSet
properties:
authoritativeAPI:
- description: authoritativeAPI is the API that is authoritative for
- this resource. Valid values are MachineAPI and ClusterAPI. When
- set to MachineAPI, writes to the spec of the machine.openshift.io
- copy of this resource will be reflected into the cluster.x-k8s.io
- copy. When set to ClusterAPI, writes to the spec of the cluster.x-k8s.io
- copy of this resource will be reflected into the machine.openshift.io
- copy. Updates to the status will be reflected in both copies of
- the resource, based on the controller implementing the functionality
- of the API. Currently the authoritative API determines which controller
- will manage the resource, this will change in a future release.
- To ensure the change has been accepted, please verify that the `status.authoritativeAPI`
- field has been updated to the desired value and that the `Synchronized`
- condition is present and set to `True`.
+ default: MachineAPI
+ description: |-
+ authoritativeAPI is the API that is authoritative for this resource.
+ Valid values are MachineAPI and ClusterAPI.
+ When set to MachineAPI, writes to the spec of the machine.openshift.io copy of this resource will be reflected into the cluster.x-k8s.io copy.
+ When set to ClusterAPI, writes to the spec of the cluster.x-k8s.io copy of this resource will be reflected into the machine.openshift.io copy.
+ Updates to the status will be reflected in both copies of the resource, based on the controller implementing the functionality of the API.
+ Currently the authoritative API determines which controller will manage the resource, this will change in a future release.
+ To ensure the change has been accepted, please verify that the `status.authoritativeAPI` field has been updated to the desired value and that the `Synchronized` condition is present and set to `True`.
enum:
- MachineAPI
- ClusterAPI
type: string
deletePolicy:
- description: DeletePolicy defines the policy used to identify nodes
- to delete when downscaling. Defaults to "Random". Valid values
- are "Random, "Newest", "Oldest"
+ description: |-
+ DeletePolicy defines the policy used to identify nodes to delete when downscaling.
+ Defaults to "Random". Valid values are "Random, "Newest", "Oldest"
enum:
- Random
- Newest
- Oldest
type: string
minReadySeconds:
- description: MinReadySeconds is the minimum number of seconds for
- which a newly created machine should be ready. Defaults to 0 (machine
- will be considered available as soon as it is ready)
+ description: |-
+ MinReadySeconds is the minimum number of seconds for which a newly created machine should be ready.
+ Defaults to 0 (machine will be considered available as soon as it is ready)
format: int32
type: integer
replicas:
default: 1
- description: Replicas is the number of desired replicas. This is a
- pointer to distinguish between explicit zero and unspecified. Defaults
- to 1.
+ description: |-
+ Replicas is the number of desired replicas.
+ This is a pointer to distinguish between explicit zero and unspecified.
+ Defaults to 1.
format: int32
type: integer
selector:
- description: 'Selector is a label query over machines that should
- match the replica count. Label keys and values that must match in
- order to be controlled by this MachineSet. It must match the machine
- template''s labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors'
+ description: |-
+ Selector is a label query over machines that should match the replica count.
+ Label keys and values that must match in order to be controlled by this MachineSet.
+ It must match the machine template's labels.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors
properties:
matchExpressions:
description: matchExpressions is a list of label selector requirements.
The requirements are ANDed.
items:
- description: A label selector requirement is a selector that
- contains values, a key, and an operator that relates the key
- and values.
+ description: |-
+ A label selector requirement is a selector that contains values, a key, and an operator that
+ relates the key and values.
properties:
key:
description: key is the label key that the selector applies
to.
type: string
operator:
- description: operator represents a key's relationship to
- a set of values. Valid operators are In, NotIn, Exists
- and DoesNotExist.
+ description: |-
+ operator represents a key's relationship to a set of values.
+ Valid operators are In, NotIn, Exists and DoesNotExist.
type: string
values:
- description: values is an array of string values. If the
- operator is In or NotIn, the values array must be non-empty.
- If the operator is Exists or DoesNotExist, the values
- array must be empty. This array is replaced during a strategic
+ description: |-
+ values is an array of string values. If the operator is In or NotIn,
+ the values array must be non-empty. If the operator is Exists or DoesNotExist,
+ the values array must be empty. This array is replaced during a strategic
merge patch.
items:
type: string
@@ -143,111 +146,123 @@ spec:
matchLabels:
additionalProperties:
type: string
- description: matchLabels is a map of {key,value} pairs. A single
- {key,value} in the matchLabels map is equivalent to an element
- of matchExpressions, whose key field is "key", the operator
- is "In", and the values array contains only "value". The requirements
- are ANDed.
+ description: |-
+ matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
+ map is equivalent to an element of matchExpressions, whose key field is "key", the
+ operator is "In", and the values array contains only "value". The requirements are ANDed.
type: object
type: object
x-kubernetes-map-type: atomic
template:
- description: Template is the object that describes the machine that
- will be created if insufficient replicas are detected.
+ description: |-
+ Template is the object that describes the machine that will be created if
+ insufficient replicas are detected.
properties:
metadata:
- description: 'Standard object''s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata'
+ description: |-
+ Standard object's metadata.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
properties:
annotations:
additionalProperties:
type: string
- description: 'Annotations is an unstructured key value map
- stored with a resource that may be set by external tools
- to store and retrieve arbitrary metadata. They are not queryable
- and should be preserved when modifying objects. More info:
- http://kubernetes.io/docs/user-guide/annotations'
+ description: |-
+ Annotations is an unstructured key value map stored with a resource that may be
+ set by external tools to store and retrieve arbitrary metadata. They are not
+ queryable and should be preserved when modifying objects.
+ More info: http://kubernetes.io/docs/user-guide/annotations
type: object
generateName:
- description: "GenerateName is an optional prefix, used by
- the server, to generate a unique name ONLY IF the Name field
- has not been provided. If this field is used, the name returned
- to the client will be different than the name passed. This
- value will also be combined with a unique suffix. The provided
- value has the same validation rules as the Name field, and
- may be truncated by the length of the suffix required to
- make the value unique on the server. \n If this field is
- specified and the generated name exists, the server will
- NOT return a 409 - instead, it will either return 201 Created
- or 500 with Reason ServerTimeout indicating a unique name
- could not be found in the time allotted, and the client
- should retry (optionally after the time indicated in the
- Retry-After header). \n Applied only if Name is not specified.
- More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency"
+ description: |-
+ GenerateName is an optional prefix, used by the server, to generate a unique
+ name ONLY IF the Name field has not been provided.
+ If this field is used, the name returned to the client will be different
+ than the name passed. This value will also be combined with a unique suffix.
+ The provided value has the same validation rules as the Name field,
+ and may be truncated by the length of the suffix required to make the value
+ unique on the server.
+
+ If this field is specified and the generated name exists, the server will
+ NOT return a 409 - instead, it will either return 201 Created or 500 with Reason
+ ServerTimeout indicating a unique name could not be found in the time allotted, and the client
+ should retry (optionally after the time indicated in the Retry-After header).
+
+ Applied only if Name is not specified.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
type: string
labels:
additionalProperties:
type: string
- description: 'Map of string keys and values that can be used
- to organize and categorize (scope and select) objects. May
- match selectors of replication controllers and services.
- More info: http://kubernetes.io/docs/user-guide/labels'
+ description: |-
+ Map of string keys and values that can be used to organize and categorize
+ (scope and select) objects. May match selectors of replication controllers
+ and services.
+ More info: http://kubernetes.io/docs/user-guide/labels
type: object
name:
- description: 'Name must be unique within a namespace. Is required
- when creating resources, although some resources may allow
- a client to request the generation of an appropriate name
- automatically. Name is primarily intended for creation idempotence
- and configuration definition. Cannot be updated. More info:
- http://kubernetes.io/docs/user-guide/identifiers#names'
+ description: |-
+ Name must be unique within a namespace. Is required when creating resources, although
+ some resources may allow a client to request the generation of an appropriate name
+ automatically. Name is primarily intended for creation idempotence and configuration
+ definition.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/identifiers#names
type: string
namespace:
- description: "Namespace defines the space within each name
- must be unique. An empty namespace is equivalent to the
- \"default\" namespace, but \"default\" is the canonical
- representation. Not all objects are required to be scoped
- to a namespace - the value of this field for those objects
- will be empty. \n Must be a DNS_LABEL. Cannot be updated.
- More info: http://kubernetes.io/docs/user-guide/namespaces"
+ description: |-
+ Namespace defines the space within each name must be unique. An empty namespace is
+ equivalent to the "default" namespace, but "default" is the canonical representation.
+ Not all objects are required to be scoped to a namespace - the value of this field for
+ those objects will be empty.
+
+ Must be a DNS_LABEL.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/namespaces
type: string
ownerReferences:
- description: List of objects depended by this object. If ALL
- objects in the list have been deleted, this object will
- be garbage collected. If this object is managed by a controller,
- then an entry in this list will point to this controller,
- with the controller field set to true. There cannot be more
- than one managing controller.
+ description: |-
+ List of objects depended by this object. If ALL objects in the list have
+ been deleted, this object will be garbage collected. If this object is managed by a controller,
+ then an entry in this list will point to this controller, with the controller field set to true.
+ There cannot be more than one managing controller.
items:
- description: OwnerReference contains enough information
- to let you identify an owning object. An owning object
- must be in the same namespace as the dependent, or be
- cluster-scoped, so there is no namespace field.
+ description: |-
+ OwnerReference contains enough information to let you identify an owning
+ object. An owning object must be in the same namespace as the dependent, or
+ be cluster-scoped, so there is no namespace field.
properties:
apiVersion:
description: API version of the referent.
type: string
blockOwnerDeletion:
- description: If true, AND if the owner has the "foregroundDeletion"
- finalizer, then the owner cannot be deleted from the
- key-value store until this reference is removed. See
- https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
- for how the garbage collector interacts with this
- field and enforces the foreground deletion. Defaults
- to false. To set this field, a user needs "delete"
- permission of the owner, otherwise 422 (Unprocessable
- Entity) will be returned.
+ description: |-
+ If true, AND if the owner has the "foregroundDeletion" finalizer, then
+ the owner cannot be deleted from the key-value store until this
+ reference is removed.
+ See https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
+ for how the garbage collector interacts with this field and enforces the foreground deletion.
+ Defaults to false.
+ To set this field, a user needs "delete" permission of the owner,
+ otherwise 422 (Unprocessable Entity) will be returned.
type: boolean
controller:
description: If true, this reference points to the managing
controller.
type: boolean
kind:
- description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind of the referent.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
- description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names'
+ description: |-
+ Name of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names
type: string
uid:
- description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids'
+ description: |-
+ UID of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids
type: string
required:
- apiVersion
@@ -262,59 +277,54 @@ spec:
x-kubernetes-list-type: map
type: object
spec:
- description: 'Specification of the desired behavior of the machine.
- More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status'
+ description: |-
+ Specification of the desired behavior of the machine.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
properties:
authoritativeAPI:
- description: authoritativeAPI is the API that is authoritative
- for this resource. Valid values are MachineAPI and ClusterAPI.
- When set to MachineAPI, writes to the spec of the machine.openshift.io
- copy of this resource will be reflected into the cluster.x-k8s.io
- copy. When set to ClusterAPI, writes to the spec of the
- cluster.x-k8s.io copy of this resource will be reflected
- into the machine.openshift.io copy. Updates to the status
- will be reflected in both copies of the resource, based
- on the controller implementing the functionality of the
- API. Currently the authoritative API determines which controller
- will manage the resource, this will change in a future release.
- To ensure the change has been accepted, please verify that
- the `status.authoritativeAPI` field has been updated to
- the desired value and that the `Synchronized` condition
- is present and set to `True`.
+ default: MachineAPI
+ description: |-
+ authoritativeAPI is the API that is authoritative for this resource.
+ Valid values are MachineAPI and ClusterAPI.
+ When set to MachineAPI, writes to the spec of the machine.openshift.io copy of this resource will be reflected into the cluster.x-k8s.io copy.
+ When set to ClusterAPI, writes to the spec of the cluster.x-k8s.io copy of this resource will be reflected into the machine.openshift.io copy.
+ Updates to the status will be reflected in both copies of the resource, based on the controller implementing the functionality of the API.
+ Currently the authoritative API determines which controller will manage the resource, this will change in a future release.
+ To ensure the change has been accepted, please verify that the `status.authoritativeAPI` field has been updated to the desired value and that the `Synchronized` condition is present and set to `True`.
enum:
- MachineAPI
- ClusterAPI
type: string
lifecycleHooks:
- description: LifecycleHooks allow users to pause operations
- on the machine at certain predefined points within the machine
- lifecycle.
+ description: |-
+ LifecycleHooks allow users to pause operations on the machine at
+ certain predefined points within the machine lifecycle.
properties:
preDrain:
- description: PreDrain hooks prevent the machine from being
- drained. This also blocks further lifecycle events,
- such as termination.
+ description: |-
+ PreDrain hooks prevent the machine from being drained.
+ This also blocks further lifecycle events, such as termination.
items:
description: LifecycleHook represents a single instance
of a lifecycle hook
properties:
name:
- description: Name defines a unique name for the
- lifcycle hook. The name should be unique and descriptive,
- ideally 1-3 words, in CamelCase or it may be namespaced,
- eg. foo.example.com/CamelCase. Names must be unique
- and should only be managed by a single entity.
+ description: |-
+ Name defines a unique name for the lifcycle hook.
+ The name should be unique and descriptive, ideally 1-3 words, in CamelCase or
+ it may be namespaced, eg. foo.example.com/CamelCase.
+ Names must be unique and should only be managed by a single entity.
maxLength: 256
minLength: 3
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
owner:
- description: Owner defines the owner of the lifecycle
- hook. This should be descriptive enough so that
- users can identify who/what is responsible for
- blocking the lifecycle. This could be the name
- of a controller (e.g. clusteroperator/etcd) or
- an administrator managing the hook.
+ description: |-
+ Owner defines the owner of the lifecycle hook.
+ This should be descriptive enough so that users can identify
+ who/what is responsible for blocking the lifecycle.
+ This could be the name of a controller (e.g. clusteroperator/etcd)
+ or an administrator managing the hook.
maxLength: 512
minLength: 3
type: string
@@ -327,30 +337,30 @@ spec:
- name
x-kubernetes-list-type: map
preTerminate:
- description: PreTerminate hooks prevent the machine from
- being terminated. PreTerminate hooks be actioned after
- the Machine has been drained.
+ description: |-
+ PreTerminate hooks prevent the machine from being terminated.
+ PreTerminate hooks be actioned after the Machine has been drained.
items:
description: LifecycleHook represents a single instance
of a lifecycle hook
properties:
name:
- description: Name defines a unique name for the
- lifcycle hook. The name should be unique and descriptive,
- ideally 1-3 words, in CamelCase or it may be namespaced,
- eg. foo.example.com/CamelCase. Names must be unique
- and should only be managed by a single entity.
+ description: |-
+ Name defines a unique name for the lifcycle hook.
+ The name should be unique and descriptive, ideally 1-3 words, in CamelCase or
+ it may be namespaced, eg. foo.example.com/CamelCase.
+ Names must be unique and should only be managed by a single entity.
maxLength: 256
minLength: 3
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
owner:
- description: Owner defines the owner of the lifecycle
- hook. This should be descriptive enough so that
- users can identify who/what is responsible for
- blocking the lifecycle. This could be the name
- of a controller (e.g. clusteroperator/etcd) or
- an administrator managing the hook.
+ description: |-
+ Owner defines the owner of the lifecycle hook.
+ This should be descriptive enough so that users can identify
+ who/what is responsible for blocking the lifecycle.
+ This could be the name of a controller (e.g. clusteroperator/etcd)
+ or an administrator managing the hook.
maxLength: 512
minLength: 3
type: string
@@ -364,101 +374,111 @@ spec:
x-kubernetes-list-type: map
type: object
metadata:
- description: ObjectMeta will autopopulate the Node created.
- Use this to indicate what labels, annotations, name prefix,
- etc., should be used when creating the Node.
+ description: |-
+ ObjectMeta will autopopulate the Node created. Use this to
+ indicate what labels, annotations, name prefix, etc., should be used
+ when creating the Node.
properties:
annotations:
additionalProperties:
type: string
- description: 'Annotations is an unstructured key value
- map stored with a resource that may be set by external
- tools to store and retrieve arbitrary metadata. They
- are not queryable and should be preserved when modifying
- objects. More info: http://kubernetes.io/docs/user-guide/annotations'
+ description: |-
+ Annotations is an unstructured key value map stored with a resource that may be
+ set by external tools to store and retrieve arbitrary metadata. They are not
+ queryable and should be preserved when modifying objects.
+ More info: http://kubernetes.io/docs/user-guide/annotations
type: object
generateName:
- description: "GenerateName is an optional prefix, used
- by the server, to generate a unique name ONLY IF the
- Name field has not been provided. If this field is used,
- the name returned to the client will be different than
- the name passed. This value will also be combined with
- a unique suffix. The provided value has the same validation
- rules as the Name field, and may be truncated by the
- length of the suffix required to make the value unique
- on the server. \n If this field is specified and the
- generated name exists, the server will NOT return a
- 409 - instead, it will either return 201 Created or
- 500 with Reason ServerTimeout indicating a unique name
- could not be found in the time allotted, and the client
- should retry (optionally after the time indicated in
- the Retry-After header). \n Applied only if Name is
- not specified. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency"
+ description: |-
+ GenerateName is an optional prefix, used by the server, to generate a unique
+ name ONLY IF the Name field has not been provided.
+ If this field is used, the name returned to the client will be different
+ than the name passed. This value will also be combined with a unique suffix.
+ The provided value has the same validation rules as the Name field,
+ and may be truncated by the length of the suffix required to make the value
+ unique on the server.
+
+ If this field is specified and the generated name exists, the server will
+ NOT return a 409 - instead, it will either return 201 Created or 500 with Reason
+ ServerTimeout indicating a unique name could not be found in the time allotted, and the client
+ should retry (optionally after the time indicated in the Retry-After header).
+
+ Applied only if Name is not specified.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
type: string
labels:
additionalProperties:
type: string
- description: 'Map of string keys and values that can be
- used to organize and categorize (scope and select) objects.
- May match selectors of replication controllers and services.
- More info: http://kubernetes.io/docs/user-guide/labels'
+ description: |-
+ Map of string keys and values that can be used to organize and categorize
+ (scope and select) objects. May match selectors of replication controllers
+ and services.
+ More info: http://kubernetes.io/docs/user-guide/labels
type: object
name:
- description: 'Name must be unique within a namespace.
- Is required when creating resources, although some resources
- may allow a client to request the generation of an appropriate
- name automatically. Name is primarily intended for creation
- idempotence and configuration definition. Cannot be
- updated. More info: http://kubernetes.io/docs/user-guide/identifiers#names'
+ description: |-
+ Name must be unique within a namespace. Is required when creating resources, although
+ some resources may allow a client to request the generation of an appropriate name
+ automatically. Name is primarily intended for creation idempotence and configuration
+ definition.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/identifiers#names
type: string
namespace:
- description: "Namespace defines the space within each
- name must be unique. An empty namespace is equivalent
- to the \"default\" namespace, but \"default\" is the
- canonical representation. Not all objects are required
- to be scoped to a namespace - the value of this field
- for those objects will be empty. \n Must be a DNS_LABEL.
- Cannot be updated. More info: http://kubernetes.io/docs/user-guide/namespaces"
+ description: |-
+ Namespace defines the space within each name must be unique. An empty namespace is
+ equivalent to the "default" namespace, but "default" is the canonical representation.
+ Not all objects are required to be scoped to a namespace - the value of this field for
+ those objects will be empty.
+
+ Must be a DNS_LABEL.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/namespaces
type: string
ownerReferences:
- description: List of objects depended by this object.
- If ALL objects in the list have been deleted, this object
- will be garbage collected. If this object is managed
- by a controller, then an entry in this list will point
- to this controller, with the controller field set to
- true. There cannot be more than one managing controller.
+ description: |-
+ List of objects depended by this object. If ALL objects in the list have
+ been deleted, this object will be garbage collected. If this object is managed by a controller,
+ then an entry in this list will point to this controller, with the controller field set to true.
+ There cannot be more than one managing controller.
items:
- description: OwnerReference contains enough information
- to let you identify an owning object. An owning object
- must be in the same namespace as the dependent, or
+ description: |-
+ OwnerReference contains enough information to let you identify an owning
+ object. An owning object must be in the same namespace as the dependent, or
be cluster-scoped, so there is no namespace field.
properties:
apiVersion:
description: API version of the referent.
type: string
blockOwnerDeletion:
- description: If true, AND if the owner has the "foregroundDeletion"
- finalizer, then the owner cannot be deleted from
- the key-value store until this reference is removed.
+ description: |-
+ If true, AND if the owner has the "foregroundDeletion" finalizer, then
+ the owner cannot be deleted from the key-value store until this
+ reference is removed.
See https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
- for how the garbage collector interacts with this
- field and enforces the foreground deletion. Defaults
- to false. To set this field, a user needs "delete"
- permission of the owner, otherwise 422 (Unprocessable
- Entity) will be returned.
+ for how the garbage collector interacts with this field and enforces the foreground deletion.
+ Defaults to false.
+ To set this field, a user needs "delete" permission of the owner,
+ otherwise 422 (Unprocessable Entity) will be returned.
type: boolean
controller:
description: If true, this reference points to the
managing controller.
type: boolean
kind:
- description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind of the referent.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
- description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names'
+ description: |-
+ Name of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names
type: string
uid:
- description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids'
+ description: |-
+ UID of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids
type: string
required:
- apiVersion
@@ -473,62 +493,58 @@ spec:
x-kubernetes-list-type: map
type: object
providerID:
- description: ProviderID is the identification ID of the machine
- provided by the provider. This field must match the provider
- ID as seen on the node object corresponding to this machine.
- This field is required by higher level consumers of cluster-api.
- Example use case is cluster autoscaler with cluster-api
- as provider. Clean-up logic in the autoscaler compares machines
- to nodes to find out machines at provider which could not
- get registered as Kubernetes nodes. With cluster-api as
- a generic out-of-tree provider for autoscaler, this field
- is required by autoscaler to be able to have a provider
- view of the list of machines. Another list of nodes is queried
- from the k8s apiserver and then a comparison is done to
- find out unregistered machines and are marked for delete.
- This field will be set by the actuators and consumed by
- higher level entities like autoscaler that will be interfacing
- with cluster-api as generic provider.
+ description: |-
+ ProviderID is the identification ID of the machine provided by the provider.
+ This field must match the provider ID as seen on the node object corresponding to this machine.
+ This field is required by higher level consumers of cluster-api. Example use case is cluster autoscaler
+ with cluster-api as provider. Clean-up logic in the autoscaler compares machines to nodes to find out
+ machines at provider which could not get registered as Kubernetes nodes. With cluster-api as a
+ generic out-of-tree provider for autoscaler, this field is required by autoscaler to be
+ able to have a provider view of the list of machines. Another list of nodes is queried from the k8s apiserver
+ and then a comparison is done to find out unregistered machines and are marked for delete.
+ This field will be set by the actuators and consumed by higher level entities like autoscaler that will
+ be interfacing with cluster-api as generic provider.
type: string
providerSpec:
description: ProviderSpec details Provider-specific configuration
to use during node creation.
properties:
value:
- description: Value is an inlined, serialized representation
- of the resource configuration. It is recommended that
- providers maintain their own versioned API types that
- should be serialized/deserialized from this field, akin
- to component config.
+ description: |-
+ Value is an inlined, serialized representation of the resource
+ configuration. It is recommended that providers maintain their own
+ versioned API types that should be serialized/deserialized from this
+ field, akin to component config.
type: object
x-kubernetes-preserve-unknown-fields: true
type: object
taints:
- description: The list of the taints to be applied to the corresponding
- Node in additive manner. This list will not overwrite any
- other taints added to the Node on an ongoing basis by other
- entities. These taints should be actively reconciled e.g.
- if you ask the machine controller to apply a taint and then
- manually remove the taint the machine controller will put
- it back) but not have the machine controller remove any
- taints
+ description: |-
+ The list of the taints to be applied to the corresponding Node in additive
+ manner. This list will not overwrite any other taints added to the Node on
+ an ongoing basis by other entities. These taints should be actively reconciled
+ e.g. if you ask the machine controller to apply a taint and then manually remove
+ the taint the machine controller will put it back) but not have the machine controller
+ remove any taints
items:
- description: The node this Taint is attached to has the
- "effect" on any pod that does not tolerate the Taint.
+ description: |-
+ The node this Taint is attached to has the "effect" on
+ any pod that does not tolerate the Taint.
properties:
effect:
- description: Required. The effect of the taint on pods
- that do not tolerate the taint. Valid effects are
- NoSchedule, PreferNoSchedule and NoExecute.
+ description: |-
+ Required. The effect of the taint on pods
+ that do not tolerate the taint.
+ Valid effects are NoSchedule, PreferNoSchedule and NoExecute.
type: string
key:
description: Required. The taint key to be applied to
a node.
type: string
timeAdded:
- description: TimeAdded represents the time at which
- the taint was added. It is only written for NoExecute
- taints.
+ description: |-
+ TimeAdded represents the time at which the taint was added.
+ It is only written for NoExecute taints.
format: date-time
type: string
value:
@@ -548,13 +564,12 @@ spec:
description: MachineSetStatus defines the observed state of MachineSet
properties:
authoritativeAPI:
- description: authoritativeAPI is the API that is authoritative for
- this resource. Valid values are MachineAPI, ClusterAPI and Migrating.
- This value is updated by the migration controller to reflect the
- authoritative API. Machine API and Cluster API controllers use this
- value to determine whether or not to reconcile the resource. When
- set to Migrating, the migration controller is currently performing
- the handover of authority from one API to the other.
+ description: |-
+ authoritativeAPI is the API that is authoritative for this resource.
+ Valid values are MachineAPI, ClusterAPI and Migrating.
+ This value is updated by the migration controller to reflect the authoritative API.
+ Machine API and Cluster API controllers use this value to determine whether or not to reconcile the resource.
+ When set to Migrating, the migration controller is currently performing the handover of authority from one API to the other.
enum:
- MachineAPI
- ClusterAPI
@@ -577,39 +592,41 @@ spec:
operational state.
properties:
lastTransitionTime:
- description: Last time the condition transitioned from one status
- to another. This should be when the underlying condition changed.
- If that is not known, then using the time when the API field
- changed is acceptable.
+ description: |-
+ Last time the condition transitioned from one status to another.
+ This should be when the underlying condition changed. If that is not known, then using the time when
+ the API field changed is acceptable.
format: date-time
type: string
message:
- description: A human readable message indicating details about
- the transition. This field may be empty.
+ description: |-
+ A human readable message indicating details about the transition.
+ This field may be empty.
type: string
reason:
- description: The reason for the condition's last transition
- in CamelCase. The specific API may choose whether or not this
- field is considered a guaranteed API. This field may not be
- empty.
+ description: |-
+ The reason for the condition's last transition in CamelCase.
+ The specific API may choose whether or not this field is considered a guaranteed API.
+ This field may not be empty.
type: string
severity:
- description: Severity provides an explicit classification of
- Reason code, so the users or machines can immediately understand
- the current situation and act accordingly. The Severity field
- MUST be set only when Status=False.
+ description: |-
+ Severity provides an explicit classification of Reason code, so the users or machines can immediately
+ understand the current situation and act accordingly.
+ The Severity field MUST be set only when Status=False.
type: string
status:
description: Status of the condition, one of True, False, Unknown.
type: string
type:
- description: Type of condition in CamelCase or in foo.example.com/CamelCase.
- Many .condition.type values are consistent across resources
- like Available, but because arbitrary conditions can be useful
- (see .node.status.conditions), the ability to deconflict is
- important.
+ description: |-
+ Type of condition in CamelCase or in foo.example.com/CamelCase.
+ Many .condition.type values are consistent across resources like Available, but because arbitrary conditions
+ can be useful (see .node.status.conditions), the ability to deconflict is important.
type: string
required:
+ - lastTransitionTime
+ - status
- type
type: object
type: array
@@ -619,22 +636,25 @@ spec:
errorMessage:
type: string
errorReason:
- description: "In the event that there is a terminal problem reconciling
- the replicas, both ErrorReason and ErrorMessage will be set. ErrorReason
- will be populated with a succinct value suitable for machine interpretation,
- while ErrorMessage will contain a more verbose string suitable for
- logging and human consumption. \n These fields should not be set
- for transitive errors that a controller faces that are expected
- to be fixed automatically over time (like service outages), but
- instead indicate that something is fundamentally wrong with the
- MachineTemplate's spec or the configuration of the machine controller,
- and that manual intervention is required. Examples of terminal errors
- would be invalid combinations of settings in the spec, values that
- are unsupported by the machine controller, or the responsible machine
- controller itself being critically misconfigured. \n Any transient
- errors that occur during the reconciliation of Machines can be added
- as events to the MachineSet object and/or logged in the controller's
- output."
+ description: |-
+ In the event that there is a terminal problem reconciling the
+ replicas, both ErrorReason and ErrorMessage will be set. ErrorReason
+ will be populated with a succinct value suitable for machine
+ interpretation, while ErrorMessage will contain a more verbose
+ string suitable for logging and human consumption.
+
+ These fields should not be set for transitive errors that a
+ controller faces that are expected to be fixed automatically over
+ time (like service outages), but instead indicate that something is
+ fundamentally wrong with the MachineTemplate's spec or the configuration of
+ the machine controller, and that manual intervention is required. Examples
+ of terminal errors would be invalid combinations of settings in the
+ spec, values that are unsupported by the machine controller, or the
+ responsible machine controller itself being critically misconfigured.
+
+ Any transient errors that occur during the reconciliation of Machines
+ can be added as events to the MachineSet object and/or logged in the
+ controller's output.
type: string
fullyLabeledReplicas:
description: The number of replicas that have labels matching the
@@ -656,11 +676,9 @@ spec:
format: int32
type: integer
synchronizedGeneration:
- description: synchronizedGeneration is the generation of the authoritative
- resource that the non-authoritative resource is synchronised with.
- This field is set when the authoritative resource is updated and
- the sync controller has updated the non-authoritative resource to
- match.
+ description: |-
+ synchronizedGeneration is the generation of the authoritative resource that the non-authoritative resource is synchronised with.
+ This field is set when the authoritative resource is updated and the sync controller has updated the non-authoritative resource to match.
format: int64
minimum: 0
type: integer
diff --git a/install/0000_30_machine-api-operator_03_machineset.Default.crd.yaml b/install/0000_30_machine-api-operator_03_machineset.Default.crd.yaml
index f996db2c6f73436f9dc968fb612c2f8a8bee3a59..98180dd70021fb08c892f1a2b319ca5a89bb80d9 100644
--- a/install/0000_30_machine-api-operator_03_machineset.Default.crd.yaml
+++ b/install/0000_30_machine-api-operator_03_machineset.Default.crd.yaml
@@ -42,19 +42,24 @@ spec:
name: v1beta1
schema:
openAPIV3Schema:
- description: 'MachineSet ensures that a specified number of machines replicas
- are running at any given time. Compatibility level 2: Stable within a major
- release for a minimum of 9 months or 3 minor releases (whichever is longer).'
+ description: |-
+ MachineSet ensures that a specified number of machines replicas are running at any given time.
+ Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -62,55 +67,57 @@ spec:
description: MachineSetSpec defines the desired state of MachineSet
properties:
deletePolicy:
- description: DeletePolicy defines the policy used to identify nodes
- to delete when downscaling. Defaults to "Random". Valid values
- are "Random, "Newest", "Oldest"
+ description: |-
+ DeletePolicy defines the policy used to identify nodes to delete when downscaling.
+ Defaults to "Random". Valid values are "Random, "Newest", "Oldest"
enum:
- Random
- Newest
- Oldest
type: string
minReadySeconds:
- description: MinReadySeconds is the minimum number of seconds for
- which a newly created machine should be ready. Defaults to 0 (machine
- will be considered available as soon as it is ready)
+ description: |-
+ MinReadySeconds is the minimum number of seconds for which a newly created machine should be ready.
+ Defaults to 0 (machine will be considered available as soon as it is ready)
format: int32
type: integer
replicas:
default: 1
- description: Replicas is the number of desired replicas. This is a
- pointer to distinguish between explicit zero and unspecified. Defaults
- to 1.
+ description: |-
+ Replicas is the number of desired replicas.
+ This is a pointer to distinguish between explicit zero and unspecified.
+ Defaults to 1.
format: int32
type: integer
selector:
- description: 'Selector is a label query over machines that should
- match the replica count. Label keys and values that must match in
- order to be controlled by this MachineSet. It must match the machine
- template''s labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors'
+ description: |-
+ Selector is a label query over machines that should match the replica count.
+ Label keys and values that must match in order to be controlled by this MachineSet.
+ It must match the machine template's labels.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors
properties:
matchExpressions:
description: matchExpressions is a list of label selector requirements.
The requirements are ANDed.
items:
- description: A label selector requirement is a selector that
- contains values, a key, and an operator that relates the key
- and values.
+ description: |-
+ A label selector requirement is a selector that contains values, a key, and an operator that
+ relates the key and values.
properties:
key:
description: key is the label key that the selector applies
to.
type: string
operator:
- description: operator represents a key's relationship to
- a set of values. Valid operators are In, NotIn, Exists
- and DoesNotExist.
+ description: |-
+ operator represents a key's relationship to a set of values.
+ Valid operators are In, NotIn, Exists and DoesNotExist.
type: string
values:
- description: values is an array of string values. If the
- operator is In or NotIn, the values array must be non-empty.
- If the operator is Exists or DoesNotExist, the values
- array must be empty. This array is replaced during a strategic
+ description: |-
+ values is an array of string values. If the operator is In or NotIn,
+ the values array must be non-empty. If the operator is Exists or DoesNotExist,
+ the values array must be empty. This array is replaced during a strategic
merge patch.
items:
type: string
@@ -125,111 +132,123 @@ spec:
matchLabels:
additionalProperties:
type: string
- description: matchLabels is a map of {key,value} pairs. A single
- {key,value} in the matchLabels map is equivalent to an element
- of matchExpressions, whose key field is "key", the operator
- is "In", and the values array contains only "value". The requirements
- are ANDed.
+ description: |-
+ matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
+ map is equivalent to an element of matchExpressions, whose key field is "key", the
+ operator is "In", and the values array contains only "value". The requirements are ANDed.
type: object
type: object
x-kubernetes-map-type: atomic
template:
- description: Template is the object that describes the machine that
- will be created if insufficient replicas are detected.
+ description: |-
+ Template is the object that describes the machine that will be created if
+ insufficient replicas are detected.
properties:
metadata:
- description: 'Standard object''s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata'
+ description: |-
+ Standard object's metadata.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
properties:
annotations:
additionalProperties:
type: string
- description: 'Annotations is an unstructured key value map
- stored with a resource that may be set by external tools
- to store and retrieve arbitrary metadata. They are not queryable
- and should be preserved when modifying objects. More info:
- http://kubernetes.io/docs/user-guide/annotations'
+ description: |-
+ Annotations is an unstructured key value map stored with a resource that may be
+ set by external tools to store and retrieve arbitrary metadata. They are not
+ queryable and should be preserved when modifying objects.
+ More info: http://kubernetes.io/docs/user-guide/annotations
type: object
generateName:
- description: "GenerateName is an optional prefix, used by
- the server, to generate a unique name ONLY IF the Name field
- has not been provided. If this field is used, the name returned
- to the client will be different than the name passed. This
- value will also be combined with a unique suffix. The provided
- value has the same validation rules as the Name field, and
- may be truncated by the length of the suffix required to
- make the value unique on the server. \n If this field is
- specified and the generated name exists, the server will
- NOT return a 409 - instead, it will either return 201 Created
- or 500 with Reason ServerTimeout indicating a unique name
- could not be found in the time allotted, and the client
- should retry (optionally after the time indicated in the
- Retry-After header). \n Applied only if Name is not specified.
- More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency"
+ description: |-
+ GenerateName is an optional prefix, used by the server, to generate a unique
+ name ONLY IF the Name field has not been provided.
+ If this field is used, the name returned to the client will be different
+ than the name passed. This value will also be combined with a unique suffix.
+ The provided value has the same validation rules as the Name field,
+ and may be truncated by the length of the suffix required to make the value
+ unique on the server.
+
+ If this field is specified and the generated name exists, the server will
+ NOT return a 409 - instead, it will either return 201 Created or 500 with Reason
+ ServerTimeout indicating a unique name could not be found in the time allotted, and the client
+ should retry (optionally after the time indicated in the Retry-After header).
+
+ Applied only if Name is not specified.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
type: string
labels:
additionalProperties:
type: string
- description: 'Map of string keys and values that can be used
- to organize and categorize (scope and select) objects. May
- match selectors of replication controllers and services.
- More info: http://kubernetes.io/docs/user-guide/labels'
+ description: |-
+ Map of string keys and values that can be used to organize and categorize
+ (scope and select) objects. May match selectors of replication controllers
+ and services.
+ More info: http://kubernetes.io/docs/user-guide/labels
type: object
name:
- description: 'Name must be unique within a namespace. Is required
- when creating resources, although some resources may allow
- a client to request the generation of an appropriate name
- automatically. Name is primarily intended for creation idempotence
- and configuration definition. Cannot be updated. More info:
- http://kubernetes.io/docs/user-guide/identifiers#names'
+ description: |-
+ Name must be unique within a namespace. Is required when creating resources, although
+ some resources may allow a client to request the generation of an appropriate name
+ automatically. Name is primarily intended for creation idempotence and configuration
+ definition.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/identifiers#names
type: string
namespace:
- description: "Namespace defines the space within each name
- must be unique. An empty namespace is equivalent to the
- \"default\" namespace, but \"default\" is the canonical
- representation. Not all objects are required to be scoped
- to a namespace - the value of this field for those objects
- will be empty. \n Must be a DNS_LABEL. Cannot be updated.
- More info: http://kubernetes.io/docs/user-guide/namespaces"
+ description: |-
+ Namespace defines the space within each name must be unique. An empty namespace is
+ equivalent to the "default" namespace, but "default" is the canonical representation.
+ Not all objects are required to be scoped to a namespace - the value of this field for
+ those objects will be empty.
+
+ Must be a DNS_LABEL.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/namespaces
type: string
ownerReferences:
- description: List of objects depended by this object. If ALL
- objects in the list have been deleted, this object will
- be garbage collected. If this object is managed by a controller,
- then an entry in this list will point to this controller,
- with the controller field set to true. There cannot be more
- than one managing controller.
+ description: |-
+ List of objects depended by this object. If ALL objects in the list have
+ been deleted, this object will be garbage collected. If this object is managed by a controller,
+ then an entry in this list will point to this controller, with the controller field set to true.
+ There cannot be more than one managing controller.
items:
- description: OwnerReference contains enough information
- to let you identify an owning object. An owning object
- must be in the same namespace as the dependent, or be
- cluster-scoped, so there is no namespace field.
+ description: |-
+ OwnerReference contains enough information to let you identify an owning
+ object. An owning object must be in the same namespace as the dependent, or
+ be cluster-scoped, so there is no namespace field.
properties:
apiVersion:
description: API version of the referent.
type: string
blockOwnerDeletion:
- description: If true, AND if the owner has the "foregroundDeletion"
- finalizer, then the owner cannot be deleted from the
- key-value store until this reference is removed. See
- https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
- for how the garbage collector interacts with this
- field and enforces the foreground deletion. Defaults
- to false. To set this field, a user needs "delete"
- permission of the owner, otherwise 422 (Unprocessable
- Entity) will be returned.
+ description: |-
+ If true, AND if the owner has the "foregroundDeletion" finalizer, then
+ the owner cannot be deleted from the key-value store until this
+ reference is removed.
+ See https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
+ for how the garbage collector interacts with this field and enforces the foreground deletion.
+ Defaults to false.
+ To set this field, a user needs "delete" permission of the owner,
+ otherwise 422 (Unprocessable Entity) will be returned.
type: boolean
controller:
description: If true, this reference points to the managing
controller.
type: boolean
kind:
- description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind of the referent.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
- description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names'
+ description: |-
+ Name of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names
type: string
uid:
- description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids'
+ description: |-
+ UID of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids
type: string
required:
- apiVersion
@@ -244,39 +263,40 @@ spec:
x-kubernetes-list-type: map
type: object
spec:
- description: 'Specification of the desired behavior of the machine.
- More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status'
+ description: |-
+ Specification of the desired behavior of the machine.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
properties:
lifecycleHooks:
- description: LifecycleHooks allow users to pause operations
- on the machine at certain predefined points within the machine
- lifecycle.
+ description: |-
+ LifecycleHooks allow users to pause operations on the machine at
+ certain predefined points within the machine lifecycle.
properties:
preDrain:
- description: PreDrain hooks prevent the machine from being
- drained. This also blocks further lifecycle events,
- such as termination.
+ description: |-
+ PreDrain hooks prevent the machine from being drained.
+ This also blocks further lifecycle events, such as termination.
items:
description: LifecycleHook represents a single instance
of a lifecycle hook
properties:
name:
- description: Name defines a unique name for the
- lifcycle hook. The name should be unique and descriptive,
- ideally 1-3 words, in CamelCase or it may be namespaced,
- eg. foo.example.com/CamelCase. Names must be unique
- and should only be managed by a single entity.
+ description: |-
+ Name defines a unique name for the lifcycle hook.
+ The name should be unique and descriptive, ideally 1-3 words, in CamelCase or
+ it may be namespaced, eg. foo.example.com/CamelCase.
+ Names must be unique and should only be managed by a single entity.
maxLength: 256
minLength: 3
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
owner:
- description: Owner defines the owner of the lifecycle
- hook. This should be descriptive enough so that
- users can identify who/what is responsible for
- blocking the lifecycle. This could be the name
- of a controller (e.g. clusteroperator/etcd) or
- an administrator managing the hook.
+ description: |-
+ Owner defines the owner of the lifecycle hook.
+ This should be descriptive enough so that users can identify
+ who/what is responsible for blocking the lifecycle.
+ This could be the name of a controller (e.g. clusteroperator/etcd)
+ or an administrator managing the hook.
maxLength: 512
minLength: 3
type: string
@@ -289,30 +309,30 @@ spec:
- name
x-kubernetes-list-type: map
preTerminate:
- description: PreTerminate hooks prevent the machine from
- being terminated. PreTerminate hooks be actioned after
- the Machine has been drained.
+ description: |-
+ PreTerminate hooks prevent the machine from being terminated.
+ PreTerminate hooks be actioned after the Machine has been drained.
items:
description: LifecycleHook represents a single instance
of a lifecycle hook
properties:
name:
- description: Name defines a unique name for the
- lifcycle hook. The name should be unique and descriptive,
- ideally 1-3 words, in CamelCase or it may be namespaced,
- eg. foo.example.com/CamelCase. Names must be unique
- and should only be managed by a single entity.
+ description: |-
+ Name defines a unique name for the lifcycle hook.
+ The name should be unique and descriptive, ideally 1-3 words, in CamelCase or
+ it may be namespaced, eg. foo.example.com/CamelCase.
+ Names must be unique and should only be managed by a single entity.
maxLength: 256
minLength: 3
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
owner:
- description: Owner defines the owner of the lifecycle
- hook. This should be descriptive enough so that
- users can identify who/what is responsible for
- blocking the lifecycle. This could be the name
- of a controller (e.g. clusteroperator/etcd) or
- an administrator managing the hook.
+ description: |-
+ Owner defines the owner of the lifecycle hook.
+ This should be descriptive enough so that users can identify
+ who/what is responsible for blocking the lifecycle.
+ This could be the name of a controller (e.g. clusteroperator/etcd)
+ or an administrator managing the hook.
maxLength: 512
minLength: 3
type: string
@@ -326,101 +346,111 @@ spec:
x-kubernetes-list-type: map
type: object
metadata:
- description: ObjectMeta will autopopulate the Node created.
- Use this to indicate what labels, annotations, name prefix,
- etc., should be used when creating the Node.
+ description: |-
+ ObjectMeta will autopopulate the Node created. Use this to
+ indicate what labels, annotations, name prefix, etc., should be used
+ when creating the Node.
properties:
annotations:
additionalProperties:
type: string
- description: 'Annotations is an unstructured key value
- map stored with a resource that may be set by external
- tools to store and retrieve arbitrary metadata. They
- are not queryable and should be preserved when modifying
- objects. More info: http://kubernetes.io/docs/user-guide/annotations'
+ description: |-
+ Annotations is an unstructured key value map stored with a resource that may be
+ set by external tools to store and retrieve arbitrary metadata. They are not
+ queryable and should be preserved when modifying objects.
+ More info: http://kubernetes.io/docs/user-guide/annotations
type: object
generateName:
- description: "GenerateName is an optional prefix, used
- by the server, to generate a unique name ONLY IF the
- Name field has not been provided. If this field is used,
- the name returned to the client will be different than
- the name passed. This value will also be combined with
- a unique suffix. The provided value has the same validation
- rules as the Name field, and may be truncated by the
- length of the suffix required to make the value unique
- on the server. \n If this field is specified and the
- generated name exists, the server will NOT return a
- 409 - instead, it will either return 201 Created or
- 500 with Reason ServerTimeout indicating a unique name
- could not be found in the time allotted, and the client
- should retry (optionally after the time indicated in
- the Retry-After header). \n Applied only if Name is
- not specified. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency"
+ description: |-
+ GenerateName is an optional prefix, used by the server, to generate a unique
+ name ONLY IF the Name field has not been provided.
+ If this field is used, the name returned to the client will be different
+ than the name passed. This value will also be combined with a unique suffix.
+ The provided value has the same validation rules as the Name field,
+ and may be truncated by the length of the suffix required to make the value
+ unique on the server.
+
+ If this field is specified and the generated name exists, the server will
+ NOT return a 409 - instead, it will either return 201 Created or 500 with Reason
+ ServerTimeout indicating a unique name could not be found in the time allotted, and the client
+ should retry (optionally after the time indicated in the Retry-After header).
+
+ Applied only if Name is not specified.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
type: string
labels:
additionalProperties:
type: string
- description: 'Map of string keys and values that can be
- used to organize and categorize (scope and select) objects.
- May match selectors of replication controllers and services.
- More info: http://kubernetes.io/docs/user-guide/labels'
+ description: |-
+ Map of string keys and values that can be used to organize and categorize
+ (scope and select) objects. May match selectors of replication controllers
+ and services.
+ More info: http://kubernetes.io/docs/user-guide/labels
type: object
name:
- description: 'Name must be unique within a namespace.
- Is required when creating resources, although some resources
- may allow a client to request the generation of an appropriate
- name automatically. Name is primarily intended for creation
- idempotence and configuration definition. Cannot be
- updated. More info: http://kubernetes.io/docs/user-guide/identifiers#names'
+ description: |-
+ Name must be unique within a namespace. Is required when creating resources, although
+ some resources may allow a client to request the generation of an appropriate name
+ automatically. Name is primarily intended for creation idempotence and configuration
+ definition.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/identifiers#names
type: string
namespace:
- description: "Namespace defines the space within each
- name must be unique. An empty namespace is equivalent
- to the \"default\" namespace, but \"default\" is the
- canonical representation. Not all objects are required
- to be scoped to a namespace - the value of this field
- for those objects will be empty. \n Must be a DNS_LABEL.
- Cannot be updated. More info: http://kubernetes.io/docs/user-guide/namespaces"
+ description: |-
+ Namespace defines the space within each name must be unique. An empty namespace is
+ equivalent to the "default" namespace, but "default" is the canonical representation.
+ Not all objects are required to be scoped to a namespace - the value of this field for
+ those objects will be empty.
+
+ Must be a DNS_LABEL.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/namespaces
type: string
ownerReferences:
- description: List of objects depended by this object.
- If ALL objects in the list have been deleted, this object
- will be garbage collected. If this object is managed
- by a controller, then an entry in this list will point
- to this controller, with the controller field set to
- true. There cannot be more than one managing controller.
+ description: |-
+ List of objects depended by this object. If ALL objects in the list have
+ been deleted, this object will be garbage collected. If this object is managed by a controller,
+ then an entry in this list will point to this controller, with the controller field set to true.
+ There cannot be more than one managing controller.
items:
- description: OwnerReference contains enough information
- to let you identify an owning object. An owning object
- must be in the same namespace as the dependent, or
+ description: |-
+ OwnerReference contains enough information to let you identify an owning
+ object. An owning object must be in the same namespace as the dependent, or
be cluster-scoped, so there is no namespace field.
properties:
apiVersion:
description: API version of the referent.
type: string
blockOwnerDeletion:
- description: If true, AND if the owner has the "foregroundDeletion"
- finalizer, then the owner cannot be deleted from
- the key-value store until this reference is removed.
+ description: |-
+ If true, AND if the owner has the "foregroundDeletion" finalizer, then
+ the owner cannot be deleted from the key-value store until this
+ reference is removed.
See https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
- for how the garbage collector interacts with this
- field and enforces the foreground deletion. Defaults
- to false. To set this field, a user needs "delete"
- permission of the owner, otherwise 422 (Unprocessable
- Entity) will be returned.
+ for how the garbage collector interacts with this field and enforces the foreground deletion.
+ Defaults to false.
+ To set this field, a user needs "delete" permission of the owner,
+ otherwise 422 (Unprocessable Entity) will be returned.
type: boolean
controller:
description: If true, this reference points to the
managing controller.
type: boolean
kind:
- description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind of the referent.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
- description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names'
+ description: |-
+ Name of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names
type: string
uid:
- description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids'
+ description: |-
+ UID of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids
type: string
required:
- apiVersion
@@ -435,62 +465,58 @@ spec:
x-kubernetes-list-type: map
type: object
providerID:
- description: ProviderID is the identification ID of the machine
- provided by the provider. This field must match the provider
- ID as seen on the node object corresponding to this machine.
- This field is required by higher level consumers of cluster-api.
- Example use case is cluster autoscaler with cluster-api
- as provider. Clean-up logic in the autoscaler compares machines
- to nodes to find out machines at provider which could not
- get registered as Kubernetes nodes. With cluster-api as
- a generic out-of-tree provider for autoscaler, this field
- is required by autoscaler to be able to have a provider
- view of the list of machines. Another list of nodes is queried
- from the k8s apiserver and then a comparison is done to
- find out unregistered machines and are marked for delete.
- This field will be set by the actuators and consumed by
- higher level entities like autoscaler that will be interfacing
- with cluster-api as generic provider.
+ description: |-
+ ProviderID is the identification ID of the machine provided by the provider.
+ This field must match the provider ID as seen on the node object corresponding to this machine.
+ This field is required by higher level consumers of cluster-api. Example use case is cluster autoscaler
+ with cluster-api as provider. Clean-up logic in the autoscaler compares machines to nodes to find out
+ machines at provider which could not get registered as Kubernetes nodes. With cluster-api as a
+ generic out-of-tree provider for autoscaler, this field is required by autoscaler to be
+ able to have a provider view of the list of machines. Another list of nodes is queried from the k8s apiserver
+ and then a comparison is done to find out unregistered machines and are marked for delete.
+ This field will be set by the actuators and consumed by higher level entities like autoscaler that will
+ be interfacing with cluster-api as generic provider.
type: string
providerSpec:
description: ProviderSpec details Provider-specific configuration
to use during node creation.
properties:
value:
- description: Value is an inlined, serialized representation
- of the resource configuration. It is recommended that
- providers maintain their own versioned API types that
- should be serialized/deserialized from this field, akin
- to component config.
+ description: |-
+ Value is an inlined, serialized representation of the resource
+ configuration. It is recommended that providers maintain their own
+ versioned API types that should be serialized/deserialized from this
+ field, akin to component config.
type: object
x-kubernetes-preserve-unknown-fields: true
type: object
taints:
- description: The list of the taints to be applied to the corresponding
- Node in additive manner. This list will not overwrite any
- other taints added to the Node on an ongoing basis by other
- entities. These taints should be actively reconciled e.g.
- if you ask the machine controller to apply a taint and then
- manually remove the taint the machine controller will put
- it back) but not have the machine controller remove any
- taints
+ description: |-
+ The list of the taints to be applied to the corresponding Node in additive
+ manner. This list will not overwrite any other taints added to the Node on
+ an ongoing basis by other entities. These taints should be actively reconciled
+ e.g. if you ask the machine controller to apply a taint and then manually remove
+ the taint the machine controller will put it back) but not have the machine controller
+ remove any taints
items:
- description: The node this Taint is attached to has the
- "effect" on any pod that does not tolerate the Taint.
+ description: |-
+ The node this Taint is attached to has the "effect" on
+ any pod that does not tolerate the Taint.
properties:
effect:
- description: Required. The effect of the taint on pods
- that do not tolerate the taint. Valid effects are
- NoSchedule, PreferNoSchedule and NoExecute.
+ description: |-
+ Required. The effect of the taint on pods
+ that do not tolerate the taint.
+ Valid effects are NoSchedule, PreferNoSchedule and NoExecute.
type: string
key:
description: Required. The taint key to be applied to
a node.
type: string
timeAdded:
- description: TimeAdded represents the time at which
- the taint was added. It is only written for NoExecute
- taints.
+ description: |-
+ TimeAdded represents the time at which the taint was added.
+ It is only written for NoExecute taints.
format: date-time
type: string
value:
@@ -521,39 +547,41 @@ spec:
operational state.
properties:
lastTransitionTime:
- description: Last time the condition transitioned from one status
- to another. This should be when the underlying condition changed.
- If that is not known, then using the time when the API field
- changed is acceptable.
+ description: |-
+ Last time the condition transitioned from one status to another.
+ This should be when the underlying condition changed. If that is not known, then using the time when
+ the API field changed is acceptable.
format: date-time
type: string
message:
- description: A human readable message indicating details about
- the transition. This field may be empty.
+ description: |-
+ A human readable message indicating details about the transition.
+ This field may be empty.
type: string
reason:
- description: The reason for the condition's last transition
- in CamelCase. The specific API may choose whether or not this
- field is considered a guaranteed API. This field may not be
- empty.
+ description: |-
+ The reason for the condition's last transition in CamelCase.
+ The specific API may choose whether or not this field is considered a guaranteed API.
+ This field may not be empty.
type: string
severity:
- description: Severity provides an explicit classification of
- Reason code, so the users or machines can immediately understand
- the current situation and act accordingly. The Severity field
- MUST be set only when Status=False.
+ description: |-
+ Severity provides an explicit classification of Reason code, so the users or machines can immediately
+ understand the current situation and act accordingly.
+ The Severity field MUST be set only when Status=False.
type: string
status:
description: Status of the condition, one of True, False, Unknown.
type: string
type:
- description: Type of condition in CamelCase or in foo.example.com/CamelCase.
- Many .condition.type values are consistent across resources
- like Available, but because arbitrary conditions can be useful
- (see .node.status.conditions), the ability to deconflict is
- important.
+ description: |-
+ Type of condition in CamelCase or in foo.example.com/CamelCase.
+ Many .condition.type values are consistent across resources like Available, but because arbitrary conditions
+ can be useful (see .node.status.conditions), the ability to deconflict is important.
type: string
required:
+ - lastTransitionTime
+ - status
- type
type: object
type: array
@@ -563,22 +591,25 @@ spec:
errorMessage:
type: string
errorReason:
- description: "In the event that there is a terminal problem reconciling
- the replicas, both ErrorReason and ErrorMessage will be set. ErrorReason
- will be populated with a succinct value suitable for machine interpretation,
- while ErrorMessage will contain a more verbose string suitable for
- logging and human consumption. \n These fields should not be set
- for transitive errors that a controller faces that are expected
- to be fixed automatically over time (like service outages), but
- instead indicate that something is fundamentally wrong with the
- MachineTemplate's spec or the configuration of the machine controller,
- and that manual intervention is required. Examples of terminal errors
- would be invalid combinations of settings in the spec, values that
- are unsupported by the machine controller, or the responsible machine
- controller itself being critically misconfigured. \n Any transient
- errors that occur during the reconciliation of Machines can be added
- as events to the MachineSet object and/or logged in the controller's
- output."
+ description: |-
+ In the event that there is a terminal problem reconciling the
+ replicas, both ErrorReason and ErrorMessage will be set. ErrorReason
+ will be populated with a succinct value suitable for machine
+ interpretation, while ErrorMessage will contain a more verbose
+ string suitable for logging and human consumption.
+
+ These fields should not be set for transitive errors that a
+ controller faces that are expected to be fixed automatically over
+ time (like service outages), but instead indicate that something is
+ fundamentally wrong with the MachineTemplate's spec or the configuration of
+ the machine controller, and that manual intervention is required. Examples
+ of terminal errors would be invalid combinations of settings in the
+ spec, values that are unsupported by the machine controller, or the
+ responsible machine controller itself being critically misconfigured.
+
+ Any transient errors that occur during the reconciliation of Machines
+ can be added as events to the MachineSet object and/or logged in the
+ controller's output.
type: string
fullyLabeledReplicas:
description: The number of replicas that have labels matching the
diff --git a/install/0000_30_machine-api-operator_03_machineset.DevPreviewNoUpgrade.crd.yaml b/install/0000_30_machine-api-operator_03_machineset.DevPreviewNoUpgrade.crd.yaml
index 1a408eaf89e965c7ce0ae3f75e23871b43df7eaa..74ff9ac76bbd96f615e3bdfcb5164044596ebd4c 100644
--- a/install/0000_30_machine-api-operator_03_machineset.DevPreviewNoUpgrade.crd.yaml
+++ b/install/0000_30_machine-api-operator_03_machineset.DevPreviewNoUpgrade.crd.yaml
@@ -42,19 +42,24 @@ spec:
name: v1beta1
schema:
openAPIV3Schema:
- description: 'MachineSet ensures that a specified number of machines replicas
- are running at any given time. Compatibility level 2: Stable within a major
- release for a minimum of 9 months or 3 minor releases (whichever is longer).'
+ description: |-
+ MachineSet ensures that a specified number of machines replicas are running at any given time.
+ Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -62,55 +67,57 @@ spec:
description: MachineSetSpec defines the desired state of MachineSet
properties:
deletePolicy:
- description: DeletePolicy defines the policy used to identify nodes
- to delete when downscaling. Defaults to "Random". Valid values
- are "Random, "Newest", "Oldest"
+ description: |-
+ DeletePolicy defines the policy used to identify nodes to delete when downscaling.
+ Defaults to "Random". Valid values are "Random, "Newest", "Oldest"
enum:
- Random
- Newest
- Oldest
type: string
minReadySeconds:
- description: MinReadySeconds is the minimum number of seconds for
- which a newly created machine should be ready. Defaults to 0 (machine
- will be considered available as soon as it is ready)
+ description: |-
+ MinReadySeconds is the minimum number of seconds for which a newly created machine should be ready.
+ Defaults to 0 (machine will be considered available as soon as it is ready)
format: int32
type: integer
replicas:
default: 1
- description: Replicas is the number of desired replicas. This is a
- pointer to distinguish between explicit zero and unspecified. Defaults
- to 1.
+ description: |-
+ Replicas is the number of desired replicas.
+ This is a pointer to distinguish between explicit zero and unspecified.
+ Defaults to 1.
format: int32
type: integer
selector:
- description: 'Selector is a label query over machines that should
- match the replica count. Label keys and values that must match in
- order to be controlled by this MachineSet. It must match the machine
- template''s labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors'
+ description: |-
+ Selector is a label query over machines that should match the replica count.
+ Label keys and values that must match in order to be controlled by this MachineSet.
+ It must match the machine template's labels.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors
properties:
matchExpressions:
description: matchExpressions is a list of label selector requirements.
The requirements are ANDed.
items:
- description: A label selector requirement is a selector that
- contains values, a key, and an operator that relates the key
- and values.
+ description: |-
+ A label selector requirement is a selector that contains values, a key, and an operator that
+ relates the key and values.
properties:
key:
description: key is the label key that the selector applies
to.
type: string
operator:
- description: operator represents a key's relationship to
- a set of values. Valid operators are In, NotIn, Exists
- and DoesNotExist.
+ description: |-
+ operator represents a key's relationship to a set of values.
+ Valid operators are In, NotIn, Exists and DoesNotExist.
type: string
values:
- description: values is an array of string values. If the
- operator is In or NotIn, the values array must be non-empty.
- If the operator is Exists or DoesNotExist, the values
- array must be empty. This array is replaced during a strategic
+ description: |-
+ values is an array of string values. If the operator is In or NotIn,
+ the values array must be non-empty. If the operator is Exists or DoesNotExist,
+ the values array must be empty. This array is replaced during a strategic
merge patch.
items:
type: string
@@ -125,111 +132,123 @@ spec:
matchLabels:
additionalProperties:
type: string
- description: matchLabels is a map of {key,value} pairs. A single
- {key,value} in the matchLabels map is equivalent to an element
- of matchExpressions, whose key field is "key", the operator
- is "In", and the values array contains only "value". The requirements
- are ANDed.
+ description: |-
+ matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
+ map is equivalent to an element of matchExpressions, whose key field is "key", the
+ operator is "In", and the values array contains only "value". The requirements are ANDed.
type: object
type: object
x-kubernetes-map-type: atomic
template:
- description: Template is the object that describes the machine that
- will be created if insufficient replicas are detected.
+ description: |-
+ Template is the object that describes the machine that will be created if
+ insufficient replicas are detected.
properties:
metadata:
- description: 'Standard object''s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata'
+ description: |-
+ Standard object's metadata.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
properties:
annotations:
additionalProperties:
type: string
- description: 'Annotations is an unstructured key value map
- stored with a resource that may be set by external tools
- to store and retrieve arbitrary metadata. They are not queryable
- and should be preserved when modifying objects. More info:
- http://kubernetes.io/docs/user-guide/annotations'
+ description: |-
+ Annotations is an unstructured key value map stored with a resource that may be
+ set by external tools to store and retrieve arbitrary metadata. They are not
+ queryable and should be preserved when modifying objects.
+ More info: http://kubernetes.io/docs/user-guide/annotations
type: object
generateName:
- description: "GenerateName is an optional prefix, used by
- the server, to generate a unique name ONLY IF the Name field
- has not been provided. If this field is used, the name returned
- to the client will be different than the name passed. This
- value will also be combined with a unique suffix. The provided
- value has the same validation rules as the Name field, and
- may be truncated by the length of the suffix required to
- make the value unique on the server. \n If this field is
- specified and the generated name exists, the server will
- NOT return a 409 - instead, it will either return 201 Created
- or 500 with Reason ServerTimeout indicating a unique name
- could not be found in the time allotted, and the client
- should retry (optionally after the time indicated in the
- Retry-After header). \n Applied only if Name is not specified.
- More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency"
+ description: |-
+ GenerateName is an optional prefix, used by the server, to generate a unique
+ name ONLY IF the Name field has not been provided.
+ If this field is used, the name returned to the client will be different
+ than the name passed. This value will also be combined with a unique suffix.
+ The provided value has the same validation rules as the Name field,
+ and may be truncated by the length of the suffix required to make the value
+ unique on the server.
+
+ If this field is specified and the generated name exists, the server will
+ NOT return a 409 - instead, it will either return 201 Created or 500 with Reason
+ ServerTimeout indicating a unique name could not be found in the time allotted, and the client
+ should retry (optionally after the time indicated in the Retry-After header).
+
+ Applied only if Name is not specified.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
type: string
labels:
additionalProperties:
type: string
- description: 'Map of string keys and values that can be used
- to organize and categorize (scope and select) objects. May
- match selectors of replication controllers and services.
- More info: http://kubernetes.io/docs/user-guide/labels'
+ description: |-
+ Map of string keys and values that can be used to organize and categorize
+ (scope and select) objects. May match selectors of replication controllers
+ and services.
+ More info: http://kubernetes.io/docs/user-guide/labels
type: object
name:
- description: 'Name must be unique within a namespace. Is required
- when creating resources, although some resources may allow
- a client to request the generation of an appropriate name
- automatically. Name is primarily intended for creation idempotence
- and configuration definition. Cannot be updated. More info:
- http://kubernetes.io/docs/user-guide/identifiers#names'
+ description: |-
+ Name must be unique within a namespace. Is required when creating resources, although
+ some resources may allow a client to request the generation of an appropriate name
+ automatically. Name is primarily intended for creation idempotence and configuration
+ definition.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/identifiers#names
type: string
namespace:
- description: "Namespace defines the space within each name
- must be unique. An empty namespace is equivalent to the
- \"default\" namespace, but \"default\" is the canonical
- representation. Not all objects are required to be scoped
- to a namespace - the value of this field for those objects
- will be empty. \n Must be a DNS_LABEL. Cannot be updated.
- More info: http://kubernetes.io/docs/user-guide/namespaces"
+ description: |-
+ Namespace defines the space within each name must be unique. An empty namespace is
+ equivalent to the "default" namespace, but "default" is the canonical representation.
+ Not all objects are required to be scoped to a namespace - the value of this field for
+ those objects will be empty.
+
+ Must be a DNS_LABEL.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/namespaces
type: string
ownerReferences:
- description: List of objects depended by this object. If ALL
- objects in the list have been deleted, this object will
- be garbage collected. If this object is managed by a controller,
- then an entry in this list will point to this controller,
- with the controller field set to true. There cannot be more
- than one managing controller.
+ description: |-
+ List of objects depended by this object. If ALL objects in the list have
+ been deleted, this object will be garbage collected. If this object is managed by a controller,
+ then an entry in this list will point to this controller, with the controller field set to true.
+ There cannot be more than one managing controller.
items:
- description: OwnerReference contains enough information
- to let you identify an owning object. An owning object
- must be in the same namespace as the dependent, or be
- cluster-scoped, so there is no namespace field.
+ description: |-
+ OwnerReference contains enough information to let you identify an owning
+ object. An owning object must be in the same namespace as the dependent, or
+ be cluster-scoped, so there is no namespace field.
properties:
apiVersion:
description: API version of the referent.
type: string
blockOwnerDeletion:
- description: If true, AND if the owner has the "foregroundDeletion"
- finalizer, then the owner cannot be deleted from the
- key-value store until this reference is removed. See
- https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
- for how the garbage collector interacts with this
- field and enforces the foreground deletion. Defaults
- to false. To set this field, a user needs "delete"
- permission of the owner, otherwise 422 (Unprocessable
- Entity) will be returned.
+ description: |-
+ If true, AND if the owner has the "foregroundDeletion" finalizer, then
+ the owner cannot be deleted from the key-value store until this
+ reference is removed.
+ See https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
+ for how the garbage collector interacts with this field and enforces the foreground deletion.
+ Defaults to false.
+ To set this field, a user needs "delete" permission of the owner,
+ otherwise 422 (Unprocessable Entity) will be returned.
type: boolean
controller:
description: If true, this reference points to the managing
controller.
type: boolean
kind:
- description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind of the referent.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
- description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names'
+ description: |-
+ Name of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names
type: string
uid:
- description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids'
+ description: |-
+ UID of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids
type: string
required:
- apiVersion
@@ -244,39 +263,40 @@ spec:
x-kubernetes-list-type: map
type: object
spec:
- description: 'Specification of the desired behavior of the machine.
- More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status'
+ description: |-
+ Specification of the desired behavior of the machine.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
properties:
lifecycleHooks:
- description: LifecycleHooks allow users to pause operations
- on the machine at certain predefined points within the machine
- lifecycle.
+ description: |-
+ LifecycleHooks allow users to pause operations on the machine at
+ certain predefined points within the machine lifecycle.
properties:
preDrain:
- description: PreDrain hooks prevent the machine from being
- drained. This also blocks further lifecycle events,
- such as termination.
+ description: |-
+ PreDrain hooks prevent the machine from being drained.
+ This also blocks further lifecycle events, such as termination.
items:
description: LifecycleHook represents a single instance
of a lifecycle hook
properties:
name:
- description: Name defines a unique name for the
- lifcycle hook. The name should be unique and descriptive,
- ideally 1-3 words, in CamelCase or it may be namespaced,
- eg. foo.example.com/CamelCase. Names must be unique
- and should only be managed by a single entity.
+ description: |-
+ Name defines a unique name for the lifcycle hook.
+ The name should be unique and descriptive, ideally 1-3 words, in CamelCase or
+ it may be namespaced, eg. foo.example.com/CamelCase.
+ Names must be unique and should only be managed by a single entity.
maxLength: 256
minLength: 3
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
owner:
- description: Owner defines the owner of the lifecycle
- hook. This should be descriptive enough so that
- users can identify who/what is responsible for
- blocking the lifecycle. This could be the name
- of a controller (e.g. clusteroperator/etcd) or
- an administrator managing the hook.
+ description: |-
+ Owner defines the owner of the lifecycle hook.
+ This should be descriptive enough so that users can identify
+ who/what is responsible for blocking the lifecycle.
+ This could be the name of a controller (e.g. clusteroperator/etcd)
+ or an administrator managing the hook.
maxLength: 512
minLength: 3
type: string
@@ -289,30 +309,30 @@ spec:
- name
x-kubernetes-list-type: map
preTerminate:
- description: PreTerminate hooks prevent the machine from
- being terminated. PreTerminate hooks be actioned after
- the Machine has been drained.
+ description: |-
+ PreTerminate hooks prevent the machine from being terminated.
+ PreTerminate hooks be actioned after the Machine has been drained.
items:
description: LifecycleHook represents a single instance
of a lifecycle hook
properties:
name:
- description: Name defines a unique name for the
- lifcycle hook. The name should be unique and descriptive,
- ideally 1-3 words, in CamelCase or it may be namespaced,
- eg. foo.example.com/CamelCase. Names must be unique
- and should only be managed by a single entity.
+ description: |-
+ Name defines a unique name for the lifcycle hook.
+ The name should be unique and descriptive, ideally 1-3 words, in CamelCase or
+ it may be namespaced, eg. foo.example.com/CamelCase.
+ Names must be unique and should only be managed by a single entity.
maxLength: 256
minLength: 3
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
owner:
- description: Owner defines the owner of the lifecycle
- hook. This should be descriptive enough so that
- users can identify who/what is responsible for
- blocking the lifecycle. This could be the name
- of a controller (e.g. clusteroperator/etcd) or
- an administrator managing the hook.
+ description: |-
+ Owner defines the owner of the lifecycle hook.
+ This should be descriptive enough so that users can identify
+ who/what is responsible for blocking the lifecycle.
+ This could be the name of a controller (e.g. clusteroperator/etcd)
+ or an administrator managing the hook.
maxLength: 512
minLength: 3
type: string
@@ -326,101 +346,111 @@ spec:
x-kubernetes-list-type: map
type: object
metadata:
- description: ObjectMeta will autopopulate the Node created.
- Use this to indicate what labels, annotations, name prefix,
- etc., should be used when creating the Node.
+ description: |-
+ ObjectMeta will autopopulate the Node created. Use this to
+ indicate what labels, annotations, name prefix, etc., should be used
+ when creating the Node.
properties:
annotations:
additionalProperties:
type: string
- description: 'Annotations is an unstructured key value
- map stored with a resource that may be set by external
- tools to store and retrieve arbitrary metadata. They
- are not queryable and should be preserved when modifying
- objects. More info: http://kubernetes.io/docs/user-guide/annotations'
+ description: |-
+ Annotations is an unstructured key value map stored with a resource that may be
+ set by external tools to store and retrieve arbitrary metadata. They are not
+ queryable and should be preserved when modifying objects.
+ More info: http://kubernetes.io/docs/user-guide/annotations
type: object
generateName:
- description: "GenerateName is an optional prefix, used
- by the server, to generate a unique name ONLY IF the
- Name field has not been provided. If this field is used,
- the name returned to the client will be different than
- the name passed. This value will also be combined with
- a unique suffix. The provided value has the same validation
- rules as the Name field, and may be truncated by the
- length of the suffix required to make the value unique
- on the server. \n If this field is specified and the
- generated name exists, the server will NOT return a
- 409 - instead, it will either return 201 Created or
- 500 with Reason ServerTimeout indicating a unique name
- could not be found in the time allotted, and the client
- should retry (optionally after the time indicated in
- the Retry-After header). \n Applied only if Name is
- not specified. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency"
+ description: |-
+ GenerateName is an optional prefix, used by the server, to generate a unique
+ name ONLY IF the Name field has not been provided.
+ If this field is used, the name returned to the client will be different
+ than the name passed. This value will also be combined with a unique suffix.
+ The provided value has the same validation rules as the Name field,
+ and may be truncated by the length of the suffix required to make the value
+ unique on the server.
+
+ If this field is specified and the generated name exists, the server will
+ NOT return a 409 - instead, it will either return 201 Created or 500 with Reason
+ ServerTimeout indicating a unique name could not be found in the time allotted, and the client
+ should retry (optionally after the time indicated in the Retry-After header).
+
+ Applied only if Name is not specified.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
type: string
labels:
additionalProperties:
type: string
- description: 'Map of string keys and values that can be
- used to organize and categorize (scope and select) objects.
- May match selectors of replication controllers and services.
- More info: http://kubernetes.io/docs/user-guide/labels'
+ description: |-
+ Map of string keys and values that can be used to organize and categorize
+ (scope and select) objects. May match selectors of replication controllers
+ and services.
+ More info: http://kubernetes.io/docs/user-guide/labels
type: object
name:
- description: 'Name must be unique within a namespace.
- Is required when creating resources, although some resources
- may allow a client to request the generation of an appropriate
- name automatically. Name is primarily intended for creation
- idempotence and configuration definition. Cannot be
- updated. More info: http://kubernetes.io/docs/user-guide/identifiers#names'
+ description: |-
+ Name must be unique within a namespace. Is required when creating resources, although
+ some resources may allow a client to request the generation of an appropriate name
+ automatically. Name is primarily intended for creation idempotence and configuration
+ definition.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/identifiers#names
type: string
namespace:
- description: "Namespace defines the space within each
- name must be unique. An empty namespace is equivalent
- to the \"default\" namespace, but \"default\" is the
- canonical representation. Not all objects are required
- to be scoped to a namespace - the value of this field
- for those objects will be empty. \n Must be a DNS_LABEL.
- Cannot be updated. More info: http://kubernetes.io/docs/user-guide/namespaces"
+ description: |-
+ Namespace defines the space within each name must be unique. An empty namespace is
+ equivalent to the "default" namespace, but "default" is the canonical representation.
+ Not all objects are required to be scoped to a namespace - the value of this field for
+ those objects will be empty.
+
+ Must be a DNS_LABEL.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/namespaces
type: string
ownerReferences:
- description: List of objects depended by this object.
- If ALL objects in the list have been deleted, this object
- will be garbage collected. If this object is managed
- by a controller, then an entry in this list will point
- to this controller, with the controller field set to
- true. There cannot be more than one managing controller.
+ description: |-
+ List of objects depended by this object. If ALL objects in the list have
+ been deleted, this object will be garbage collected. If this object is managed by a controller,
+ then an entry in this list will point to this controller, with the controller field set to true.
+ There cannot be more than one managing controller.
items:
- description: OwnerReference contains enough information
- to let you identify an owning object. An owning object
- must be in the same namespace as the dependent, or
+ description: |-
+ OwnerReference contains enough information to let you identify an owning
+ object. An owning object must be in the same namespace as the dependent, or
be cluster-scoped, so there is no namespace field.
properties:
apiVersion:
description: API version of the referent.
type: string
blockOwnerDeletion:
- description: If true, AND if the owner has the "foregroundDeletion"
- finalizer, then the owner cannot be deleted from
- the key-value store until this reference is removed.
+ description: |-
+ If true, AND if the owner has the "foregroundDeletion" finalizer, then
+ the owner cannot be deleted from the key-value store until this
+ reference is removed.
See https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
- for how the garbage collector interacts with this
- field and enforces the foreground deletion. Defaults
- to false. To set this field, a user needs "delete"
- permission of the owner, otherwise 422 (Unprocessable
- Entity) will be returned.
+ for how the garbage collector interacts with this field and enforces the foreground deletion.
+ Defaults to false.
+ To set this field, a user needs "delete" permission of the owner,
+ otherwise 422 (Unprocessable Entity) will be returned.
type: boolean
controller:
description: If true, this reference points to the
managing controller.
type: boolean
kind:
- description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind of the referent.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
- description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names'
+ description: |-
+ Name of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names
type: string
uid:
- description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids'
+ description: |-
+ UID of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids
type: string
required:
- apiVersion
@@ -435,62 +465,58 @@ spec:
x-kubernetes-list-type: map
type: object
providerID:
- description: ProviderID is the identification ID of the machine
- provided by the provider. This field must match the provider
- ID as seen on the node object corresponding to this machine.
- This field is required by higher level consumers of cluster-api.
- Example use case is cluster autoscaler with cluster-api
- as provider. Clean-up logic in the autoscaler compares machines
- to nodes to find out machines at provider which could not
- get registered as Kubernetes nodes. With cluster-api as
- a generic out-of-tree provider for autoscaler, this field
- is required by autoscaler to be able to have a provider
- view of the list of machines. Another list of nodes is queried
- from the k8s apiserver and then a comparison is done to
- find out unregistered machines and are marked for delete.
- This field will be set by the actuators and consumed by
- higher level entities like autoscaler that will be interfacing
- with cluster-api as generic provider.
+ description: |-
+ ProviderID is the identification ID of the machine provided by the provider.
+ This field must match the provider ID as seen on the node object corresponding to this machine.
+ This field is required by higher level consumers of cluster-api. Example use case is cluster autoscaler
+ with cluster-api as provider. Clean-up logic in the autoscaler compares machines to nodes to find out
+ machines at provider which could not get registered as Kubernetes nodes. With cluster-api as a
+ generic out-of-tree provider for autoscaler, this field is required by autoscaler to be
+ able to have a provider view of the list of machines. Another list of nodes is queried from the k8s apiserver
+ and then a comparison is done to find out unregistered machines and are marked for delete.
+ This field will be set by the actuators and consumed by higher level entities like autoscaler that will
+ be interfacing with cluster-api as generic provider.
type: string
providerSpec:
description: ProviderSpec details Provider-specific configuration
to use during node creation.
properties:
value:
- description: Value is an inlined, serialized representation
- of the resource configuration. It is recommended that
- providers maintain their own versioned API types that
- should be serialized/deserialized from this field, akin
- to component config.
+ description: |-
+ Value is an inlined, serialized representation of the resource
+ configuration. It is recommended that providers maintain their own
+ versioned API types that should be serialized/deserialized from this
+ field, akin to component config.
type: object
x-kubernetes-preserve-unknown-fields: true
type: object
taints:
- description: The list of the taints to be applied to the corresponding
- Node in additive manner. This list will not overwrite any
- other taints added to the Node on an ongoing basis by other
- entities. These taints should be actively reconciled e.g.
- if you ask the machine controller to apply a taint and then
- manually remove the taint the machine controller will put
- it back) but not have the machine controller remove any
- taints
+ description: |-
+ The list of the taints to be applied to the corresponding Node in additive
+ manner. This list will not overwrite any other taints added to the Node on
+ an ongoing basis by other entities. These taints should be actively reconciled
+ e.g. if you ask the machine controller to apply a taint and then manually remove
+ the taint the machine controller will put it back) but not have the machine controller
+ remove any taints
items:
- description: The node this Taint is attached to has the
- "effect" on any pod that does not tolerate the Taint.
+ description: |-
+ The node this Taint is attached to has the "effect" on
+ any pod that does not tolerate the Taint.
properties:
effect:
- description: Required. The effect of the taint on pods
- that do not tolerate the taint. Valid effects are
- NoSchedule, PreferNoSchedule and NoExecute.
+ description: |-
+ Required. The effect of the taint on pods
+ that do not tolerate the taint.
+ Valid effects are NoSchedule, PreferNoSchedule and NoExecute.
type: string
key:
description: Required. The taint key to be applied to
a node.
type: string
timeAdded:
- description: TimeAdded represents the time at which
- the taint was added. It is only written for NoExecute
- taints.
+ description: |-
+ TimeAdded represents the time at which the taint was added.
+ It is only written for NoExecute taints.
format: date-time
type: string
value:
@@ -521,39 +547,41 @@ spec:
operational state.
properties:
lastTransitionTime:
- description: Last time the condition transitioned from one status
- to another. This should be when the underlying condition changed.
- If that is not known, then using the time when the API field
- changed is acceptable.
+ description: |-
+ Last time the condition transitioned from one status to another.
+ This should be when the underlying condition changed. If that is not known, then using the time when
+ the API field changed is acceptable.
format: date-time
type: string
message:
- description: A human readable message indicating details about
- the transition. This field may be empty.
+ description: |-
+ A human readable message indicating details about the transition.
+ This field may be empty.
type: string
reason:
- description: The reason for the condition's last transition
- in CamelCase. The specific API may choose whether or not this
- field is considered a guaranteed API. This field may not be
- empty.
+ description: |-
+ The reason for the condition's last transition in CamelCase.
+ The specific API may choose whether or not this field is considered a guaranteed API.
+ This field may not be empty.
type: string
severity:
- description: Severity provides an explicit classification of
- Reason code, so the users or machines can immediately understand
- the current situation and act accordingly. The Severity field
- MUST be set only when Status=False.
+ description: |-
+ Severity provides an explicit classification of Reason code, so the users or machines can immediately
+ understand the current situation and act accordingly.
+ The Severity field MUST be set only when Status=False.
type: string
status:
description: Status of the condition, one of True, False, Unknown.
type: string
type:
- description: Type of condition in CamelCase or in foo.example.com/CamelCase.
- Many .condition.type values are consistent across resources
- like Available, but because arbitrary conditions can be useful
- (see .node.status.conditions), the ability to deconflict is
- important.
+ description: |-
+ Type of condition in CamelCase or in foo.example.com/CamelCase.
+ Many .condition.type values are consistent across resources like Available, but because arbitrary conditions
+ can be useful (see .node.status.conditions), the ability to deconflict is important.
type: string
required:
+ - lastTransitionTime
+ - status
- type
type: object
type: array
@@ -563,22 +591,25 @@ spec:
errorMessage:
type: string
errorReason:
- description: "In the event that there is a terminal problem reconciling
- the replicas, both ErrorReason and ErrorMessage will be set. ErrorReason
- will be populated with a succinct value suitable for machine interpretation,
- while ErrorMessage will contain a more verbose string suitable for
- logging and human consumption. \n These fields should not be set
- for transitive errors that a controller faces that are expected
- to be fixed automatically over time (like service outages), but
- instead indicate that something is fundamentally wrong with the
- MachineTemplate's spec or the configuration of the machine controller,
- and that manual intervention is required. Examples of terminal errors
- would be invalid combinations of settings in the spec, values that
- are unsupported by the machine controller, or the responsible machine
- controller itself being critically misconfigured. \n Any transient
- errors that occur during the reconciliation of Machines can be added
- as events to the MachineSet object and/or logged in the controller's
- output."
+ description: |-
+ In the event that there is a terminal problem reconciling the
+ replicas, both ErrorReason and ErrorMessage will be set. ErrorReason
+ will be populated with a succinct value suitable for machine
+ interpretation, while ErrorMessage will contain a more verbose
+ string suitable for logging and human consumption.
+
+ These fields should not be set for transitive errors that a
+ controller faces that are expected to be fixed automatically over
+ time (like service outages), but instead indicate that something is
+ fundamentally wrong with the MachineTemplate's spec or the configuration of
+ the machine controller, and that manual intervention is required. Examples
+ of terminal errors would be invalid combinations of settings in the
+ spec, values that are unsupported by the machine controller, or the
+ responsible machine controller itself being critically misconfigured.
+
+ Any transient errors that occur during the reconciliation of Machines
+ can be added as events to the MachineSet object and/or logged in the
+ controller's output.
type: string
fullyLabeledReplicas:
description: The number of replicas that have labels matching the
diff --git a/install/0000_30_machine-api-operator_03_machineset.TechPreviewNoUpgrade.crd.yaml b/install/0000_30_machine-api-operator_03_machineset.TechPreviewNoUpgrade.crd.yaml
index 1bba55e3d56d914dc5f4d285131685a9263ce9f0..a218da06c15d70374a657242d306b23e592ac86c 100644
--- a/install/0000_30_machine-api-operator_03_machineset.TechPreviewNoUpgrade.crd.yaml
+++ b/install/0000_30_machine-api-operator_03_machineset.TechPreviewNoUpgrade.crd.yaml
@@ -42,19 +42,24 @@ spec:
name: v1beta1
schema:
openAPIV3Schema:
- description: 'MachineSet ensures that a specified number of machines replicas
- are running at any given time. Compatibility level 2: Stable within a major
- release for a minimum of 9 months or 3 minor releases (whichever is longer).'
+ description: |-
+ MachineSet ensures that a specified number of machines replicas are running at any given time.
+ Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -62,55 +67,57 @@ spec:
description: MachineSetSpec defines the desired state of MachineSet
properties:
deletePolicy:
- description: DeletePolicy defines the policy used to identify nodes
- to delete when downscaling. Defaults to "Random". Valid values
- are "Random, "Newest", "Oldest"
+ description: |-
+ DeletePolicy defines the policy used to identify nodes to delete when downscaling.
+ Defaults to "Random". Valid values are "Random, "Newest", "Oldest"
enum:
- Random
- Newest
- Oldest
type: string
minReadySeconds:
- description: MinReadySeconds is the minimum number of seconds for
- which a newly created machine should be ready. Defaults to 0 (machine
- will be considered available as soon as it is ready)
+ description: |-
+ MinReadySeconds is the minimum number of seconds for which a newly created machine should be ready.
+ Defaults to 0 (machine will be considered available as soon as it is ready)
format: int32
type: integer
replicas:
default: 1
- description: Replicas is the number of desired replicas. This is a
- pointer to distinguish between explicit zero and unspecified. Defaults
- to 1.
+ description: |-
+ Replicas is the number of desired replicas.
+ This is a pointer to distinguish between explicit zero and unspecified.
+ Defaults to 1.
format: int32
type: integer
selector:
- description: 'Selector is a label query over machines that should
- match the replica count. Label keys and values that must match in
- order to be controlled by this MachineSet. It must match the machine
- template''s labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors'
+ description: |-
+ Selector is a label query over machines that should match the replica count.
+ Label keys and values that must match in order to be controlled by this MachineSet.
+ It must match the machine template's labels.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors
properties:
matchExpressions:
description: matchExpressions is a list of label selector requirements.
The requirements are ANDed.
items:
- description: A label selector requirement is a selector that
- contains values, a key, and an operator that relates the key
- and values.
+ description: |-
+ A label selector requirement is a selector that contains values, a key, and an operator that
+ relates the key and values.
properties:
key:
description: key is the label key that the selector applies
to.
type: string
operator:
- description: operator represents a key's relationship to
- a set of values. Valid operators are In, NotIn, Exists
- and DoesNotExist.
+ description: |-
+ operator represents a key's relationship to a set of values.
+ Valid operators are In, NotIn, Exists and DoesNotExist.
type: string
values:
- description: values is an array of string values. If the
- operator is In or NotIn, the values array must be non-empty.
- If the operator is Exists or DoesNotExist, the values
- array must be empty. This array is replaced during a strategic
+ description: |-
+ values is an array of string values. If the operator is In or NotIn,
+ the values array must be non-empty. If the operator is Exists or DoesNotExist,
+ the values array must be empty. This array is replaced during a strategic
merge patch.
items:
type: string
@@ -125,111 +132,123 @@ spec:
matchLabels:
additionalProperties:
type: string
- description: matchLabels is a map of {key,value} pairs. A single
- {key,value} in the matchLabels map is equivalent to an element
- of matchExpressions, whose key field is "key", the operator
- is "In", and the values array contains only "value". The requirements
- are ANDed.
+ description: |-
+ matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
+ map is equivalent to an element of matchExpressions, whose key field is "key", the
+ operator is "In", and the values array contains only "value". The requirements are ANDed.
type: object
type: object
x-kubernetes-map-type: atomic
template:
- description: Template is the object that describes the machine that
- will be created if insufficient replicas are detected.
+ description: |-
+ Template is the object that describes the machine that will be created if
+ insufficient replicas are detected.
properties:
metadata:
- description: 'Standard object''s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata'
+ description: |-
+ Standard object's metadata.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
properties:
annotations:
additionalProperties:
type: string
- description: 'Annotations is an unstructured key value map
- stored with a resource that may be set by external tools
- to store and retrieve arbitrary metadata. They are not queryable
- and should be preserved when modifying objects. More info:
- http://kubernetes.io/docs/user-guide/annotations'
+ description: |-
+ Annotations is an unstructured key value map stored with a resource that may be
+ set by external tools to store and retrieve arbitrary metadata. They are not
+ queryable and should be preserved when modifying objects.
+ More info: http://kubernetes.io/docs/user-guide/annotations
type: object
generateName:
- description: "GenerateName is an optional prefix, used by
- the server, to generate a unique name ONLY IF the Name field
- has not been provided. If this field is used, the name returned
- to the client will be different than the name passed. This
- value will also be combined with a unique suffix. The provided
- value has the same validation rules as the Name field, and
- may be truncated by the length of the suffix required to
- make the value unique on the server. \n If this field is
- specified and the generated name exists, the server will
- NOT return a 409 - instead, it will either return 201 Created
- or 500 with Reason ServerTimeout indicating a unique name
- could not be found in the time allotted, and the client
- should retry (optionally after the time indicated in the
- Retry-After header). \n Applied only if Name is not specified.
- More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency"
+ description: |-
+ GenerateName is an optional prefix, used by the server, to generate a unique
+ name ONLY IF the Name field has not been provided.
+ If this field is used, the name returned to the client will be different
+ than the name passed. This value will also be combined with a unique suffix.
+ The provided value has the same validation rules as the Name field,
+ and may be truncated by the length of the suffix required to make the value
+ unique on the server.
+
+ If this field is specified and the generated name exists, the server will
+ NOT return a 409 - instead, it will either return 201 Created or 500 with Reason
+ ServerTimeout indicating a unique name could not be found in the time allotted, and the client
+ should retry (optionally after the time indicated in the Retry-After header).
+
+ Applied only if Name is not specified.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
type: string
labels:
additionalProperties:
type: string
- description: 'Map of string keys and values that can be used
- to organize and categorize (scope and select) objects. May
- match selectors of replication controllers and services.
- More info: http://kubernetes.io/docs/user-guide/labels'
+ description: |-
+ Map of string keys and values that can be used to organize and categorize
+ (scope and select) objects. May match selectors of replication controllers
+ and services.
+ More info: http://kubernetes.io/docs/user-guide/labels
type: object
name:
- description: 'Name must be unique within a namespace. Is required
- when creating resources, although some resources may allow
- a client to request the generation of an appropriate name
- automatically. Name is primarily intended for creation idempotence
- and configuration definition. Cannot be updated. More info:
- http://kubernetes.io/docs/user-guide/identifiers#names'
+ description: |-
+ Name must be unique within a namespace. Is required when creating resources, although
+ some resources may allow a client to request the generation of an appropriate name
+ automatically. Name is primarily intended for creation idempotence and configuration
+ definition.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/identifiers#names
type: string
namespace:
- description: "Namespace defines the space within each name
- must be unique. An empty namespace is equivalent to the
- \"default\" namespace, but \"default\" is the canonical
- representation. Not all objects are required to be scoped
- to a namespace - the value of this field for those objects
- will be empty. \n Must be a DNS_LABEL. Cannot be updated.
- More info: http://kubernetes.io/docs/user-guide/namespaces"
+ description: |-
+ Namespace defines the space within each name must be unique. An empty namespace is
+ equivalent to the "default" namespace, but "default" is the canonical representation.
+ Not all objects are required to be scoped to a namespace - the value of this field for
+ those objects will be empty.
+
+ Must be a DNS_LABEL.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/namespaces
type: string
ownerReferences:
- description: List of objects depended by this object. If ALL
- objects in the list have been deleted, this object will
- be garbage collected. If this object is managed by a controller,
- then an entry in this list will point to this controller,
- with the controller field set to true. There cannot be more
- than one managing controller.
+ description: |-
+ List of objects depended by this object. If ALL objects in the list have
+ been deleted, this object will be garbage collected. If this object is managed by a controller,
+ then an entry in this list will point to this controller, with the controller field set to true.
+ There cannot be more than one managing controller.
items:
- description: OwnerReference contains enough information
- to let you identify an owning object. An owning object
- must be in the same namespace as the dependent, or be
- cluster-scoped, so there is no namespace field.
+ description: |-
+ OwnerReference contains enough information to let you identify an owning
+ object. An owning object must be in the same namespace as the dependent, or
+ be cluster-scoped, so there is no namespace field.
properties:
apiVersion:
description: API version of the referent.
type: string
blockOwnerDeletion:
- description: If true, AND if the owner has the "foregroundDeletion"
- finalizer, then the owner cannot be deleted from the
- key-value store until this reference is removed. See
- https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
- for how the garbage collector interacts with this
- field and enforces the foreground deletion. Defaults
- to false. To set this field, a user needs "delete"
- permission of the owner, otherwise 422 (Unprocessable
- Entity) will be returned.
+ description: |-
+ If true, AND if the owner has the "foregroundDeletion" finalizer, then
+ the owner cannot be deleted from the key-value store until this
+ reference is removed.
+ See https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
+ for how the garbage collector interacts with this field and enforces the foreground deletion.
+ Defaults to false.
+ To set this field, a user needs "delete" permission of the owner,
+ otherwise 422 (Unprocessable Entity) will be returned.
type: boolean
controller:
description: If true, this reference points to the managing
controller.
type: boolean
kind:
- description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind of the referent.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
- description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names'
+ description: |-
+ Name of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names
type: string
uid:
- description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids'
+ description: |-
+ UID of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids
type: string
required:
- apiVersion
@@ -244,39 +263,40 @@ spec:
x-kubernetes-list-type: map
type: object
spec:
- description: 'Specification of the desired behavior of the machine.
- More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status'
+ description: |-
+ Specification of the desired behavior of the machine.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
properties:
lifecycleHooks:
- description: LifecycleHooks allow users to pause operations
- on the machine at certain predefined points within the machine
- lifecycle.
+ description: |-
+ LifecycleHooks allow users to pause operations on the machine at
+ certain predefined points within the machine lifecycle.
properties:
preDrain:
- description: PreDrain hooks prevent the machine from being
- drained. This also blocks further lifecycle events,
- such as termination.
+ description: |-
+ PreDrain hooks prevent the machine from being drained.
+ This also blocks further lifecycle events, such as termination.
items:
description: LifecycleHook represents a single instance
of a lifecycle hook
properties:
name:
- description: Name defines a unique name for the
- lifcycle hook. The name should be unique and descriptive,
- ideally 1-3 words, in CamelCase or it may be namespaced,
- eg. foo.example.com/CamelCase. Names must be unique
- and should only be managed by a single entity.
+ description: |-
+ Name defines a unique name for the lifcycle hook.
+ The name should be unique and descriptive, ideally 1-3 words, in CamelCase or
+ it may be namespaced, eg. foo.example.com/CamelCase.
+ Names must be unique and should only be managed by a single entity.
maxLength: 256
minLength: 3
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
owner:
- description: Owner defines the owner of the lifecycle
- hook. This should be descriptive enough so that
- users can identify who/what is responsible for
- blocking the lifecycle. This could be the name
- of a controller (e.g. clusteroperator/etcd) or
- an administrator managing the hook.
+ description: |-
+ Owner defines the owner of the lifecycle hook.
+ This should be descriptive enough so that users can identify
+ who/what is responsible for blocking the lifecycle.
+ This could be the name of a controller (e.g. clusteroperator/etcd)
+ or an administrator managing the hook.
maxLength: 512
minLength: 3
type: string
@@ -289,30 +309,30 @@ spec:
- name
x-kubernetes-list-type: map
preTerminate:
- description: PreTerminate hooks prevent the machine from
- being terminated. PreTerminate hooks be actioned after
- the Machine has been drained.
+ description: |-
+ PreTerminate hooks prevent the machine from being terminated.
+ PreTerminate hooks be actioned after the Machine has been drained.
items:
description: LifecycleHook represents a single instance
of a lifecycle hook
properties:
name:
- description: Name defines a unique name for the
- lifcycle hook. The name should be unique and descriptive,
- ideally 1-3 words, in CamelCase or it may be namespaced,
- eg. foo.example.com/CamelCase. Names must be unique
- and should only be managed by a single entity.
+ description: |-
+ Name defines a unique name for the lifcycle hook.
+ The name should be unique and descriptive, ideally 1-3 words, in CamelCase or
+ it may be namespaced, eg. foo.example.com/CamelCase.
+ Names must be unique and should only be managed by a single entity.
maxLength: 256
minLength: 3
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
owner:
- description: Owner defines the owner of the lifecycle
- hook. This should be descriptive enough so that
- users can identify who/what is responsible for
- blocking the lifecycle. This could be the name
- of a controller (e.g. clusteroperator/etcd) or
- an administrator managing the hook.
+ description: |-
+ Owner defines the owner of the lifecycle hook.
+ This should be descriptive enough so that users can identify
+ who/what is responsible for blocking the lifecycle.
+ This could be the name of a controller (e.g. clusteroperator/etcd)
+ or an administrator managing the hook.
maxLength: 512
minLength: 3
type: string
@@ -326,101 +346,111 @@ spec:
x-kubernetes-list-type: map
type: object
metadata:
- description: ObjectMeta will autopopulate the Node created.
- Use this to indicate what labels, annotations, name prefix,
- etc., should be used when creating the Node.
+ description: |-
+ ObjectMeta will autopopulate the Node created. Use this to
+ indicate what labels, annotations, name prefix, etc., should be used
+ when creating the Node.
properties:
annotations:
additionalProperties:
type: string
- description: 'Annotations is an unstructured key value
- map stored with a resource that may be set by external
- tools to store and retrieve arbitrary metadata. They
- are not queryable and should be preserved when modifying
- objects. More info: http://kubernetes.io/docs/user-guide/annotations'
+ description: |-
+ Annotations is an unstructured key value map stored with a resource that may be
+ set by external tools to store and retrieve arbitrary metadata. They are not
+ queryable and should be preserved when modifying objects.
+ More info: http://kubernetes.io/docs/user-guide/annotations
type: object
generateName:
- description: "GenerateName is an optional prefix, used
- by the server, to generate a unique name ONLY IF the
- Name field has not been provided. If this field is used,
- the name returned to the client will be different than
- the name passed. This value will also be combined with
- a unique suffix. The provided value has the same validation
- rules as the Name field, and may be truncated by the
- length of the suffix required to make the value unique
- on the server. \n If this field is specified and the
- generated name exists, the server will NOT return a
- 409 - instead, it will either return 201 Created or
- 500 with Reason ServerTimeout indicating a unique name
- could not be found in the time allotted, and the client
- should retry (optionally after the time indicated in
- the Retry-After header). \n Applied only if Name is
- not specified. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency"
+ description: |-
+ GenerateName is an optional prefix, used by the server, to generate a unique
+ name ONLY IF the Name field has not been provided.
+ If this field is used, the name returned to the client will be different
+ than the name passed. This value will also be combined with a unique suffix.
+ The provided value has the same validation rules as the Name field,
+ and may be truncated by the length of the suffix required to make the value
+ unique on the server.
+
+ If this field is specified and the generated name exists, the server will
+ NOT return a 409 - instead, it will either return 201 Created or 500 with Reason
+ ServerTimeout indicating a unique name could not be found in the time allotted, and the client
+ should retry (optionally after the time indicated in the Retry-After header).
+
+ Applied only if Name is not specified.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
type: string
labels:
additionalProperties:
type: string
- description: 'Map of string keys and values that can be
- used to organize and categorize (scope and select) objects.
- May match selectors of replication controllers and services.
- More info: http://kubernetes.io/docs/user-guide/labels'
+ description: |-
+ Map of string keys and values that can be used to organize and categorize
+ (scope and select) objects. May match selectors of replication controllers
+ and services.
+ More info: http://kubernetes.io/docs/user-guide/labels
type: object
name:
- description: 'Name must be unique within a namespace.
- Is required when creating resources, although some resources
- may allow a client to request the generation of an appropriate
- name automatically. Name is primarily intended for creation
- idempotence and configuration definition. Cannot be
- updated. More info: http://kubernetes.io/docs/user-guide/identifiers#names'
+ description: |-
+ Name must be unique within a namespace. Is required when creating resources, although
+ some resources may allow a client to request the generation of an appropriate name
+ automatically. Name is primarily intended for creation idempotence and configuration
+ definition.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/identifiers#names
type: string
namespace:
- description: "Namespace defines the space within each
- name must be unique. An empty namespace is equivalent
- to the \"default\" namespace, but \"default\" is the
- canonical representation. Not all objects are required
- to be scoped to a namespace - the value of this field
- for those objects will be empty. \n Must be a DNS_LABEL.
- Cannot be updated. More info: http://kubernetes.io/docs/user-guide/namespaces"
+ description: |-
+ Namespace defines the space within each name must be unique. An empty namespace is
+ equivalent to the "default" namespace, but "default" is the canonical representation.
+ Not all objects are required to be scoped to a namespace - the value of this field for
+ those objects will be empty.
+
+ Must be a DNS_LABEL.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/namespaces
type: string
ownerReferences:
- description: List of objects depended by this object.
- If ALL objects in the list have been deleted, this object
- will be garbage collected. If this object is managed
- by a controller, then an entry in this list will point
- to this controller, with the controller field set to
- true. There cannot be more than one managing controller.
+ description: |-
+ List of objects depended by this object. If ALL objects in the list have
+ been deleted, this object will be garbage collected. If this object is managed by a controller,
+ then an entry in this list will point to this controller, with the controller field set to true.
+ There cannot be more than one managing controller.
items:
- description: OwnerReference contains enough information
- to let you identify an owning object. An owning object
- must be in the same namespace as the dependent, or
+ description: |-
+ OwnerReference contains enough information to let you identify an owning
+ object. An owning object must be in the same namespace as the dependent, or
be cluster-scoped, so there is no namespace field.
properties:
apiVersion:
description: API version of the referent.
type: string
blockOwnerDeletion:
- description: If true, AND if the owner has the "foregroundDeletion"
- finalizer, then the owner cannot be deleted from
- the key-value store until this reference is removed.
+ description: |-
+ If true, AND if the owner has the "foregroundDeletion" finalizer, then
+ the owner cannot be deleted from the key-value store until this
+ reference is removed.
See https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
- for how the garbage collector interacts with this
- field and enforces the foreground deletion. Defaults
- to false. To set this field, a user needs "delete"
- permission of the owner, otherwise 422 (Unprocessable
- Entity) will be returned.
+ for how the garbage collector interacts with this field and enforces the foreground deletion.
+ Defaults to false.
+ To set this field, a user needs "delete" permission of the owner,
+ otherwise 422 (Unprocessable Entity) will be returned.
type: boolean
controller:
description: If true, this reference points to the
managing controller.
type: boolean
kind:
- description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind of the referent.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
- description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names'
+ description: |-
+ Name of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names
type: string
uid:
- description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids'
+ description: |-
+ UID of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids
type: string
required:
- apiVersion
@@ -435,62 +465,58 @@ spec:
x-kubernetes-list-type: map
type: object
providerID:
- description: ProviderID is the identification ID of the machine
- provided by the provider. This field must match the provider
- ID as seen on the node object corresponding to this machine.
- This field is required by higher level consumers of cluster-api.
- Example use case is cluster autoscaler with cluster-api
- as provider. Clean-up logic in the autoscaler compares machines
- to nodes to find out machines at provider which could not
- get registered as Kubernetes nodes. With cluster-api as
- a generic out-of-tree provider for autoscaler, this field
- is required by autoscaler to be able to have a provider
- view of the list of machines. Another list of nodes is queried
- from the k8s apiserver and then a comparison is done to
- find out unregistered machines and are marked for delete.
- This field will be set by the actuators and consumed by
- higher level entities like autoscaler that will be interfacing
- with cluster-api as generic provider.
+ description: |-
+ ProviderID is the identification ID of the machine provided by the provider.
+ This field must match the provider ID as seen on the node object corresponding to this machine.
+ This field is required by higher level consumers of cluster-api. Example use case is cluster autoscaler
+ with cluster-api as provider. Clean-up logic in the autoscaler compares machines to nodes to find out
+ machines at provider which could not get registered as Kubernetes nodes. With cluster-api as a
+ generic out-of-tree provider for autoscaler, this field is required by autoscaler to be
+ able to have a provider view of the list of machines. Another list of nodes is queried from the k8s apiserver
+ and then a comparison is done to find out unregistered machines and are marked for delete.
+ This field will be set by the actuators and consumed by higher level entities like autoscaler that will
+ be interfacing with cluster-api as generic provider.
type: string
providerSpec:
description: ProviderSpec details Provider-specific configuration
to use during node creation.
properties:
value:
- description: Value is an inlined, serialized representation
- of the resource configuration. It is recommended that
- providers maintain their own versioned API types that
- should be serialized/deserialized from this field, akin
- to component config.
+ description: |-
+ Value is an inlined, serialized representation of the resource
+ configuration. It is recommended that providers maintain their own
+ versioned API types that should be serialized/deserialized from this
+ field, akin to component config.
type: object
x-kubernetes-preserve-unknown-fields: true
type: object
taints:
- description: The list of the taints to be applied to the corresponding
- Node in additive manner. This list will not overwrite any
- other taints added to the Node on an ongoing basis by other
- entities. These taints should be actively reconciled e.g.
- if you ask the machine controller to apply a taint and then
- manually remove the taint the machine controller will put
- it back) but not have the machine controller remove any
- taints
+ description: |-
+ The list of the taints to be applied to the corresponding Node in additive
+ manner. This list will not overwrite any other taints added to the Node on
+ an ongoing basis by other entities. These taints should be actively reconciled
+ e.g. if you ask the machine controller to apply a taint and then manually remove
+ the taint the machine controller will put it back) but not have the machine controller
+ remove any taints
items:
- description: The node this Taint is attached to has the
- "effect" on any pod that does not tolerate the Taint.
+ description: |-
+ The node this Taint is attached to has the "effect" on
+ any pod that does not tolerate the Taint.
properties:
effect:
- description: Required. The effect of the taint on pods
- that do not tolerate the taint. Valid effects are
- NoSchedule, PreferNoSchedule and NoExecute.
+ description: |-
+ Required. The effect of the taint on pods
+ that do not tolerate the taint.
+ Valid effects are NoSchedule, PreferNoSchedule and NoExecute.
type: string
key:
description: Required. The taint key to be applied to
a node.
type: string
timeAdded:
- description: TimeAdded represents the time at which
- the taint was added. It is only written for NoExecute
- taints.
+ description: |-
+ TimeAdded represents the time at which the taint was added.
+ It is only written for NoExecute taints.
format: date-time
type: string
value:
@@ -521,39 +547,41 @@ spec:
operational state.
properties:
lastTransitionTime:
- description: Last time the condition transitioned from one status
- to another. This should be when the underlying condition changed.
- If that is not known, then using the time when the API field
- changed is acceptable.
+ description: |-
+ Last time the condition transitioned from one status to another.
+ This should be when the underlying condition changed. If that is not known, then using the time when
+ the API field changed is acceptable.
format: date-time
type: string
message:
- description: A human readable message indicating details about
- the transition. This field may be empty.
+ description: |-
+ A human readable message indicating details about the transition.
+ This field may be empty.
type: string
reason:
- description: The reason for the condition's last transition
- in CamelCase. The specific API may choose whether or not this
- field is considered a guaranteed API. This field may not be
- empty.
+ description: |-
+ The reason for the condition's last transition in CamelCase.
+ The specific API may choose whether or not this field is considered a guaranteed API.
+ This field may not be empty.
type: string
severity:
- description: Severity provides an explicit classification of
- Reason code, so the users or machines can immediately understand
- the current situation and act accordingly. The Severity field
- MUST be set only when Status=False.
+ description: |-
+ Severity provides an explicit classification of Reason code, so the users or machines can immediately
+ understand the current situation and act accordingly.
+ The Severity field MUST be set only when Status=False.
type: string
status:
description: Status of the condition, one of True, False, Unknown.
type: string
type:
- description: Type of condition in CamelCase or in foo.example.com/CamelCase.
- Many .condition.type values are consistent across resources
- like Available, but because arbitrary conditions can be useful
- (see .node.status.conditions), the ability to deconflict is
- important.
+ description: |-
+ Type of condition in CamelCase or in foo.example.com/CamelCase.
+ Many .condition.type values are consistent across resources like Available, but because arbitrary conditions
+ can be useful (see .node.status.conditions), the ability to deconflict is important.
type: string
required:
+ - lastTransitionTime
+ - status
- type
type: object
type: array
@@ -563,22 +591,25 @@ spec:
errorMessage:
type: string
errorReason:
- description: "In the event that there is a terminal problem reconciling
- the replicas, both ErrorReason and ErrorMessage will be set. ErrorReason
- will be populated with a succinct value suitable for machine interpretation,
- while ErrorMessage will contain a more verbose string suitable for
- logging and human consumption. \n These fields should not be set
- for transitive errors that a controller faces that are expected
- to be fixed automatically over time (like service outages), but
- instead indicate that something is fundamentally wrong with the
- MachineTemplate's spec or the configuration of the machine controller,
- and that manual intervention is required. Examples of terminal errors
- would be invalid combinations of settings in the spec, values that
- are unsupported by the machine controller, or the responsible machine
- controller itself being critically misconfigured. \n Any transient
- errors that occur during the reconciliation of Machines can be added
- as events to the MachineSet object and/or logged in the controller's
- output."
+ description: |-
+ In the event that there is a terminal problem reconciling the
+ replicas, both ErrorReason and ErrorMessage will be set. ErrorReason
+ will be populated with a succinct value suitable for machine
+ interpretation, while ErrorMessage will contain a more verbose
+ string suitable for logging and human consumption.
+
+ These fields should not be set for transitive errors that a
+ controller faces that are expected to be fixed automatically over
+ time (like service outages), but instead indicate that something is
+ fundamentally wrong with the MachineTemplate's spec or the configuration of
+ the machine controller, and that manual intervention is required. Examples
+ of terminal errors would be invalid combinations of settings in the
+ spec, values that are unsupported by the machine controller, or the
+ responsible machine controller itself being critically misconfigured.
+
+ Any transient errors that occur during the reconciliation of Machines
+ can be added as events to the MachineSet object and/or logged in the
+ controller's output.
type: string
fullyLabeledReplicas:
description: The number of replicas that have labels matching the
diff --git a/install/0000_30_machine-api-operator_07_machinehealthcheck.crd.yaml b/install/0000_30_machine-api-operator_07_machinehealthcheck.crd.yaml
index 41bc3f115f0ab19e882cf2181c3ce5d7065758e1..f175e8b98abf7b76a2d45b084fa12267800834dc 100644
--- a/install/0000_30_machine-api-operator_07_machinehealthcheck.crd.yaml
+++ b/install/0000_30_machine-api-operator_07_machinehealthcheck.crd.yaml
@@ -36,19 +36,24 @@ spec:
name: v1beta1
schema:
openAPIV3Schema:
- description: 'MachineHealthCheck is the Schema for the machinehealthchecks
- API Compatibility level 2: Stable within a major release for a minimum of
- 9 months or 3 minor releases (whichever is longer).'
+ description: |-
+ MachineHealthCheck is the Schema for the machinehealthchecks API
+ Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -60,92 +65,102 @@ spec:
- type: integer
- type: string
default: 100%
- description: Any farther remediation is only allowed if at most "MaxUnhealthy"
- machines selected by "selector" are not healthy. Expects either
- a postive integer value or a percentage value. Percentage values
- must be positive whole numbers and are capped at 100%. Both 0 and
- 0% are valid and will block all remediation.
+ description: |-
+ Any farther remediation is only allowed if at most "MaxUnhealthy" machines selected by
+ "selector" are not healthy.
+ Expects either a postive integer value or a percentage value.
+ Percentage values must be positive whole numbers and are capped at 100%.
+ Both 0 and 0% are valid and will block all remediation.
pattern: ^((100|[0-9]{1,2})%|[0-9]+)$
x-kubernetes-int-or-string: true
nodeStartupTimeout:
default: 10m
- description: Machines older than this duration without a node will
- be considered to have failed and will be remediated. To prevent
- Machines without Nodes from being removed, disable startup checks
- by setting this value explicitly to "0". Expects an unsigned duration
- string of decimal numbers each with optional fraction and a unit
- suffix, eg "300ms", "1.5h" or "2h45m". Valid time units are "ns",
- "us" (or "µs"), "ms", "s", "m", "h".
+ description: |-
+ Machines older than this duration without a node will be considered to have
+ failed and will be remediated.
+ To prevent Machines without Nodes from being removed, disable startup checks
+ by setting this value explicitly to "0".
+ Expects an unsigned duration string of decimal numbers each with optional
+ fraction and a unit suffix, eg "300ms", "1.5h" or "2h45m".
+ Valid time units are "ns", "us" (or "µs"), "ms", "s", "m", "h".
pattern: ^0|([0-9]+(\.[0-9]+)?(ns|us|µs|ms|s|m|h))+$
type: string
remediationTemplate:
- description: "RemediationTemplate is a reference to a remediation
- template provided by an infrastructure provider. \n This field is
- completely optional, when filled, the MachineHealthCheck controller
- creates a new object from the template referenced and hands off
- remediation of the machine to a controller that lives outside of
- Machine API Operator."
+ description: |-
+ RemediationTemplate is a reference to a remediation template
+ provided by an infrastructure provider.
+
+ This field is completely optional, when filled, the MachineHealthCheck controller
+ creates a new object from the template referenced and hands off remediation of the machine to
+ a controller that lives outside of Machine API Operator.
properties:
apiVersion:
description: API version of the referent.
type: string
fieldPath:
- description: 'If referring to a piece of an object instead of
- an entire object, this string should contain a valid JSON/Go
- field access statement, such as desiredState.manifest.containers[2].
- For example, if the object reference is to a container within
- a pod, this would take on a value like: "spec.containers{name}"
- (where "name" refers to the name of the container that triggered
- the event) or if no container name is specified "spec.containers[2]"
- (container with index 2 in this pod). This syntax is chosen
- only to have some well-defined way of referencing a part of
- an object. TODO: this design is not final and this field is
- subject to change in the future.'
+ description: |-
+ If referring to a piece of an object instead of an entire object, this string
+ should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
+ For example, if the object reference is to a container within a pod, this would take on a value like:
+ "spec.containers{name}" (where "name" refers to the name of the container that triggered
+ the event) or if no container name is specified "spec.containers[2]" (container with
+ index 2 in this pod). This syntax is chosen only to have some well-defined way of
+ referencing a part of an object.
type: string
kind:
- description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind of the referent.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
- description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
+ description: |-
+ Name of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
type: string
namespace:
- description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
+ description: |-
+ Namespace of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
type: string
resourceVersion:
- description: 'Specific resourceVersion to which this reference
- is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency'
+ description: |-
+ Specific resourceVersion to which this reference is made, if any.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
type: string
uid:
- description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids'
+ description: |-
+ UID of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
type: string
type: object
x-kubernetes-map-type: atomic
selector:
- description: 'Label selector to match machines whose health will be
- exercised. Note: An empty selector will match all machines.'
+ description: |-
+ Label selector to match machines whose health will be exercised.
+ Note: An empty selector will match all machines.
properties:
matchExpressions:
description: matchExpressions is a list of label selector requirements.
The requirements are ANDed.
items:
- description: A label selector requirement is a selector that
- contains values, a key, and an operator that relates the key
- and values.
+ description: |-
+ A label selector requirement is a selector that contains values, a key, and an operator that
+ relates the key and values.
properties:
key:
description: key is the label key that the selector applies
to.
type: string
operator:
- description: operator represents a key's relationship to
- a set of values. Valid operators are In, NotIn, Exists
- and DoesNotExist.
+ description: |-
+ operator represents a key's relationship to a set of values.
+ Valid operators are In, NotIn, Exists and DoesNotExist.
type: string
values:
- description: values is an array of string values. If the
- operator is In or NotIn, the values array must be non-empty.
- If the operator is Exists or DoesNotExist, the values
- array must be empty. This array is replaced during a strategic
+ description: |-
+ values is an array of string values. If the operator is In or NotIn,
+ the values array must be non-empty. If the operator is Exists or DoesNotExist,
+ the values array must be empty. This array is replaced during a strategic
merge patch.
items:
type: string
@@ -160,33 +175,32 @@ spec:
matchLabels:
additionalProperties:
type: string
- description: matchLabels is a map of {key,value} pairs. A single
- {key,value} in the matchLabels map is equivalent to an element
- of matchExpressions, whose key field is "key", the operator
- is "In", and the values array contains only "value". The requirements
- are ANDed.
+ description: |-
+ matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
+ map is equivalent to an element of matchExpressions, whose key field is "key", the
+ operator is "In", and the values array contains only "value". The requirements are ANDed.
type: object
type: object
x-kubernetes-map-type: atomic
unhealthyConditions:
- description: UnhealthyConditions contains a list of the conditions
- that determine whether a node is considered unhealthy. The conditions
- are combined in a logical OR, i.e. if any of the conditions is met,
- the node is unhealthy.
+ description: |-
+ UnhealthyConditions contains a list of the conditions that determine
+ whether a node is considered unhealthy. The conditions are combined in a
+ logical OR, i.e. if any of the conditions is met, the node is unhealthy.
items:
- description: UnhealthyCondition represents a Node condition type
- and value with a timeout specified as a duration. When the named
- condition has been in the given status for at least the timeout
- value, a node is considered unhealthy.
+ description: |-
+ UnhealthyCondition represents a Node condition type and value with a timeout
+ specified as a duration. When the named condition has been in the given
+ status for at least the timeout value, a node is considered unhealthy.
properties:
status:
minLength: 1
type: string
timeout:
- description: Expects an unsigned duration string of decimal
- numbers each with optional fraction and a unit suffix, eg
- "300ms", "1.5h" or "2h45m". Valid time units are "ns", "us"
- (or "µs"), "ms", "s", "m", "h".
+ description: |-
+ Expects an unsigned duration string of decimal numbers each with optional
+ fraction and a unit suffix, eg "300ms", "1.5h" or "2h45m".
+ Valid time units are "ns", "us" (or "µs"), "ms", "s", "m", "h".
pattern: ^([0-9]+(\.[0-9]+)?(ns|us|µs|ms|s|m|h))+$
type: string
type:
@@ -206,39 +220,41 @@ spec:
operational state.
properties:
lastTransitionTime:
- description: Last time the condition transitioned from one status
- to another. This should be when the underlying condition changed.
- If that is not known, then using the time when the API field
- changed is acceptable.
+ description: |-
+ Last time the condition transitioned from one status to another.
+ This should be when the underlying condition changed. If that is not known, then using the time when
+ the API field changed is acceptable.
format: date-time
type: string
message:
- description: A human readable message indicating details about
- the transition. This field may be empty.
+ description: |-
+ A human readable message indicating details about the transition.
+ This field may be empty.
type: string
reason:
- description: The reason for the condition's last transition
- in CamelCase. The specific API may choose whether or not this
- field is considered a guaranteed API. This field may not be
- empty.
+ description: |-
+ The reason for the condition's last transition in CamelCase.
+ The specific API may choose whether or not this field is considered a guaranteed API.
+ This field may not be empty.
type: string
severity:
- description: Severity provides an explicit classification of
- Reason code, so the users or machines can immediately understand
- the current situation and act accordingly. The Severity field
- MUST be set only when Status=False.
+ description: |-
+ Severity provides an explicit classification of Reason code, so the users or machines can immediately
+ understand the current situation and act accordingly.
+ The Severity field MUST be set only when Status=False.
type: string
status:
description: Status of the condition, one of True, False, Unknown.
type: string
type:
- description: Type of condition in CamelCase or in foo.example.com/CamelCase.
- Many .condition.type values are consistent across resources
- like Available, but because arbitrary conditions can be useful
- (see .node.status.conditions), the ability to deconflict is
- important.
+ description: |-
+ Type of condition in CamelCase or in foo.example.com/CamelCase.
+ Many .condition.type values are consistent across resources like Available, but because arbitrary conditions
+ can be useful (see .node.status.conditions), the ability to deconflict is important.
type: string
required:
+ - lastTransitionTime
+ - status
- type
type: object
type: array
@@ -256,9 +272,9 @@ spec:
minimum: 0
type: integer
remediationsAllowed:
- description: RemediationsAllowed is the number of further remediations
- allowed by this machine health check before maxUnhealthy short circuiting
- will be applied
+ description: |-
+ RemediationsAllowed is the number of further remediations allowed by this machine health check before
+ maxUnhealthy short circuiting will be applied
format: int32
minimum: 0
type: integer
diff --git a/pkg/webhooks/machine_webhook.go b/pkg/webhooks/machine_webhook.go
index f60bf86736e53e4032cb298a859b64149652fca2..22899c47f88d03b7a887caf5b359091c62a897fa 100644
--- a/pkg/webhooks/machine_webhook.go
+++ b/pkg/webhooks/machine_webhook.go
@@ -5,6 +5,7 @@ import (
"encoding/json"
"errors"
"fmt"
+ "reflect"
"regexp"
goruntime "runtime"
"strconv"
@@ -1588,19 +1589,30 @@ func validateNutanix(m *machinev1beta1.Machine, config *admissionConfig) (bool,
if err := validateNutanixResourceIdentifier("image", providerSpec.Image); err != nil {
errs = append(errs, err)
}
- // Currently, we only support one subnet per VM in Openshift
- // We may extend this to support more than one subnet per VM in future releases
- if len(providerSpec.Subnets) == 0 {
+
+ numSubnets := len(providerSpec.Subnets)
+ switch {
+ case numSubnets == 0:
subnets, _ := json.Marshal(providerSpec.Subnets)
errs = append(errs, field.Invalid(field.NewPath("providerSpec", "subnets"), string(subnets), "missing subnets: nodes may fail to start if no subnets are configured"))
- } else if len(providerSpec.Subnets) > 1 {
- subnets, _ := json.Marshal(providerSpec.Subnets)
- errs = append(errs, field.Invalid(field.NewPath("providerSpec", "subnets"), string(subnets), "too many subnets: currently nutanix platform supports one subnet per VM but more than one subnets are configured"))
- }
+ case numSubnets > 32:
+ errs = append(errs, field.TooMany(field.NewPath("providerSpec", "subnets"), numSubnets, 32))
+ default:
+ subnets := []machinev1.NutanixResourceIdentifier{}
+ for _, subnet := range providerSpec.Subnets {
+ if err := validateNutanixResourceIdentifier("subnet", subnet); err != nil {
+ errs = append(errs, err)
+ } else {
+ // check duplication
+ for _, other := range subnets {
+ if reflect.DeepEqual(subnet, other) {
+ subnetData, _ := json.Marshal(subnet)
+ errs = append(errs, field.Invalid(field.NewPath("providerSpec", "subnets"), string(subnetData), "should not configure duplicate subnet value"))
+ }
+ }
+ }
- for _, subnet := range providerSpec.Subnets {
- if err := validateNutanixResourceIdentifier("subnet", subnet); err != nil {
- errs = append(errs, err)
+ subnets = append(subnets, subnet)
}
}
diff --git a/pkg/webhooks/machine_webhook_test.go b/pkg/webhooks/machine_webhook_test.go
index b946e9f2b12f7ccad831db2e7505e041675254b1..5a8d97d6a0184d23c04e3a40316d4b7aae6156e2 100644
--- a/pkg/webhooks/machine_webhook_test.go
+++ b/pkg/webhooks/machine_webhook_test.go
@@ -1146,6 +1146,79 @@ func TestMachineCreation(t *testing.T) {
},
expectedError: "[providerSpec.cluster.type: Invalid value: \"\": cluster type must be one of name or uuid, providerSpec.image.type: Invalid value: \"\": image type must be one of name or uuid, providerSpec.subnets: Invalid value: \"null\": missing subnets: nodes may fail to start if no subnets are configured]",
},
+ {
+ name: "with nutanix and too many subnets set",
+ platformType: osconfigv1.NutanixPlatformType,
+ clusterID: "nutanix-cluster",
+ presetClusterID: true,
+ providerSpecValue: &kruntime.RawExtension{
+ Object: &machinev1.NutanixMachineProviderConfig{
+ VCPUSockets: minNutanixCPUSockets,
+ VCPUsPerSocket: minNutanixCPUPerSocket,
+ MemorySize: resource.MustParse(fmt.Sprintf("%dMi", minNutanixMemoryMiB)),
+ SystemDiskSize: resource.MustParse(fmt.Sprintf("%dGi", minNutanixDiskGiB)),
+ Subnets: []machinev1.NutanixResourceIdentifier{
+ {Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("subnet-1")},
+ {Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("subnet-2")},
+ {Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("subnet-3")},
+ {Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("subnet-4")},
+ {Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("subnet-5")},
+ {Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("subnet-6")},
+ {Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("subnet-7")},
+ {Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("subnet-8")},
+ {Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("subnet-9")},
+ {Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("subnet-10")},
+ {Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("subnet-11")},
+ {Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("subnet-12")},
+ {Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("subnet-13")},
+ {Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("subnet-14")},
+ {Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("subnet-15")},
+ {Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("subnet-16")},
+ {Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("subnet-17")},
+ {Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("subnet-18")},
+ {Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("subnet-19")},
+ {Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("subnet-20")},
+ {Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("subnet-21")},
+ {Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("subnet-22")},
+ {Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("subnet-23")},
+ {Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("subnet-24")},
+ {Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("subnet-25")},
+ {Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("subnet-26")},
+ {Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("subnet-27")},
+ {Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("subnet-28")},
+ {Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("subnet-29")},
+ {Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("subnet-30")},
+ {Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("subnet-31")},
+ {Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("subnet-32")},
+ {Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("subnet-33")},
+ },
+ Cluster: machinev1.NutanixResourceIdentifier{Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("cluster-1")},
+ Image: machinev1.NutanixResourceIdentifier{Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("image-1")},
+ },
+ },
+ expectedError: "providerSpec.subnets: Too many: 33: must have at most 32 items",
+ },
+ {
+ name: "with nutanix and duplicate subnet set",
+ platformType: osconfigv1.NutanixPlatformType,
+ clusterID: "nutanix-cluster",
+ presetClusterID: true,
+ providerSpecValue: &kruntime.RawExtension{
+ Object: &machinev1.NutanixMachineProviderConfig{
+ VCPUSockets: minNutanixCPUSockets,
+ VCPUsPerSocket: minNutanixCPUPerSocket,
+ MemorySize: resource.MustParse(fmt.Sprintf("%dMi", minNutanixMemoryMiB)),
+ SystemDiskSize: resource.MustParse(fmt.Sprintf("%dGi", minNutanixDiskGiB)),
+ Subnets: []machinev1.NutanixResourceIdentifier{
+ {Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("subnet-1")},
+ {Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("subnet-1")},
+ },
+ Cluster: machinev1.NutanixResourceIdentifier{Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("cluster-1")},
+ Image: machinev1.NutanixResourceIdentifier{Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("image-1")},
+ },
+ },
+ expectedError: `providerSpec.subnets: Invalid value: "{\"type\":\"name\",\"name\":\"subnet-1\"}": should not configure duplicate subnet value`,
+ },
{
name: "with nutanix and the required fields set",
platformType: osconfigv1.NutanixPlatformType,
@@ -1159,6 +1232,7 @@ func TestMachineCreation(t *testing.T) {
SystemDiskSize: resource.MustParse(fmt.Sprintf("%dGi", minNutanixDiskGiB)),
Subnets: []machinev1.NutanixResourceIdentifier{
{Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("subnet-1")},
+ {Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("subnet-2")},
},
Cluster: machinev1.NutanixResourceIdentifier{Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("cluster-1")},
Image: machinev1.NutanixResourceIdentifier{Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("image-1")},
@@ -5056,17 +5130,6 @@ func TestValidateNutanixProviderSpec(t *testing.T) {
expectedError: "providerSpec.subnets: Invalid value: \"[]\": missing subnets: nodes may fail to start if no subnets are configured",
//expectedWarnings: []string{"providerSpec.subnets: missing subnets: nodes may fail to start if no subnets are configured"},
},
- {
- testCase: "with too many subnets provided",
- modifySpec: func(p *machinev1.NutanixMachineProviderConfig) {
- p.Subnets = []machinev1.NutanixResourceIdentifier{
- {Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("subnet-1")},
- {Type: machinev1.NutanixIdentifierName, Name: ptr.To[string]("subnet-2")},
- }
- },
- expectedOk: false,
- expectedError: "providerSpec.subnets: Invalid value: \"[{\\\"type\\\":\\\"name\\\",\\\"name\\\":\\\"subnet-1\\\"},{\\\"type\\\":\\\"name\\\",\\\"name\\\":\\\"subnet-2\\\"}]\": too many subnets: currently nutanix platform supports one subnet per VM but more than one subnets are configured",
- },
{
testCase: "with no userDataSecret provided",
modifySpec: func(p *machinev1.NutanixMachineProviderConfig) {
diff --git a/vendor/github.com/openshift/api/apps/v1/generated.proto b/vendor/github.com/openshift/api/apps/v1/generated.proto
index ddf28f6004fe0bf6ac2e69a83263a1396addff14..010f36b9558ce1ce935d9b96fe365773d2c2cbf5 100644
--- a/vendor/github.com/openshift/api/apps/v1/generated.proto
+++ b/vendor/github.com/openshift/api/apps/v1/generated.proto
@@ -19,7 +19,7 @@ message CustomDeploymentStrategyParams {
optional string image = 1;
// Environment holds the environment which will be given to the container for Image.
- repeated k8s.io.api.core.v1.EnvVar environment = 2;
+ repeated .k8s.io.api.core.v1.EnvVar environment = 2;
// Command is optional and overrides CMD in the container Image.
repeated string command = 3;
@@ -39,7 +39,7 @@ message DeploymentCause {
message DeploymentCauseImageTrigger {
// From is a reference to the changed object which triggered a deployment. The field may have
// the kinds DockerImage, ImageStreamTag, or ImageStreamImage.
- optional k8s.io.api.core.v1.ObjectReference from = 1;
+ optional .k8s.io.api.core.v1.ObjectReference from = 1;
}
// DeploymentCondition describes the state of a deployment config at a certain point.
@@ -51,10 +51,10 @@ message DeploymentCondition {
optional string status = 2;
// The last time this condition was updated.
- optional k8s.io.apimachinery.pkg.apis.meta.v1.Time lastUpdateTime = 6;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.Time lastUpdateTime = 6;
// The last time the condition transitioned from one status to another.
- optional k8s.io.apimachinery.pkg.apis.meta.v1.Time lastTransitionTime = 3;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.Time lastTransitionTime = 3;
// The reason for the condition's last transition.
optional string reason = 4;
@@ -79,7 +79,7 @@ message DeploymentCondition {
message DeploymentConfig {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// Spec represents a desired deployment state and how to deploy to it.
optional DeploymentConfigSpec spec = 2;
@@ -96,7 +96,7 @@ message DeploymentConfig {
message DeploymentConfigList {
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
// Items is a list of deployment configs
repeated DeploymentConfig items = 2;
@@ -120,7 +120,7 @@ message DeploymentConfigRollback {
// DeploymentConfigRollbackSpec represents the options for rollback generation.
message DeploymentConfigRollbackSpec {
// From points to a ReplicationController which is a deployment.
- optional k8s.io.api.core.v1.ObjectReference from = 1;
+ optional .k8s.io.api.core.v1.ObjectReference from = 1;
// Revision to rollback to. If set to 0, rollback to the last revision.
optional int64 revision = 2;
@@ -179,7 +179,7 @@ message DeploymentConfigSpec {
// Template is the object that describes the pod that will be created if
// insufficient replicas are detected.
- optional k8s.io.api.core.v1.PodTemplateSpec template = 8;
+ optional .k8s.io.api.core.v1.PodTemplateSpec template = 8;
}
// DeploymentConfigStatus represents the current deployment state.
@@ -258,7 +258,7 @@ message DeploymentLogOptions {
// precedes the time a pod was started, only logs since the pod start will be returned.
// If this value is in the future, no logs will be returned.
// Only one of sinceSeconds or sinceTime may be specified.
- optional k8s.io.apimachinery.pkg.apis.meta.v1.Time sinceTime = 5;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.Time sinceTime = 5;
// If true, add an RFC3339 or RFC3339Nano timestamp at the beginning of every line
// of log output. Defaults to false.
@@ -321,7 +321,7 @@ message DeploymentStrategy {
optional RollingDeploymentStrategyParams rollingParams = 4;
// Resources contains resource requirements to execute the deployment and any hooks.
- optional k8s.io.api.core.v1.ResourceRequirements resources = 5;
+ optional .k8s.io.api.core.v1.ResourceRequirements resources = 5;
// Labels is a set of key, value pairs added to custom deployer and lifecycle pre/post hook pods.
map<string, string> labels = 6;
@@ -349,7 +349,7 @@ message DeploymentTriggerImageChangeParams {
// From is a reference to an image stream tag to watch for changes. From.Name is the only
// required subfield - if From.Namespace is blank, the namespace of the current deployment
// trigger will be used.
- optional k8s.io.api.core.v1.ObjectReference from = 3;
+ optional .k8s.io.api.core.v1.ObjectReference from = 3;
// LastTriggeredImage is the last image to be triggered.
optional string lastTriggeredImage = 4;
@@ -381,7 +381,7 @@ message ExecNewPodHook {
repeated string command = 1;
// Env is a set of environment variables to supply to the hook pod's container.
- repeated k8s.io.api.core.v1.EnvVar env = 2;
+ repeated .k8s.io.api.core.v1.EnvVar env = 2;
// ContainerName is the name of a container in the deployment pod template
// whose container image will be used for the hook pod's container.
@@ -452,7 +452,7 @@ message RollingDeploymentStrategyParams {
// RC can be scaled down further, followed by scaling up the new RC,
// ensuring that at least 70% of original number of pods are available at
// all times during the update.
- optional k8s.io.apimachinery.pkg.util.intstr.IntOrString maxUnavailable = 4;
+ optional .k8s.io.apimachinery.pkg.util.intstr.IntOrString maxUnavailable = 4;
// MaxSurge is the maximum number of pods that can be scheduled above the
// original number of pods. Value can be an absolute number (ex: 5) or a
@@ -466,7 +466,7 @@ message RollingDeploymentStrategyParams {
// killed, new RC can be scaled up further, ensuring that total number of
// pods running at any time during the update is atmost 130% of original
// pods.
- optional k8s.io.apimachinery.pkg.util.intstr.IntOrString maxSurge = 5;
+ optional .k8s.io.apimachinery.pkg.util.intstr.IntOrString maxSurge = 5;
// Pre is a lifecycle hook which is executed before the deployment process
// begins. All LifecycleHookFailurePolicy values are supported.
@@ -485,6 +485,6 @@ message TagImageHook {
optional string containerName = 1;
// To is the target ImageStreamTag to set the container's image onto.
- optional k8s.io.api.core.v1.ObjectReference to = 2;
+ optional .k8s.io.api.core.v1.ObjectReference to = 2;
}
diff --git a/vendor/github.com/openshift/api/authorization/v1/generated.proto b/vendor/github.com/openshift/api/authorization/v1/generated.proto
index b8ba1d90683eb26e62893528fb6a1c3dcec783de..28e4e8ce62beec074927e0352361b74fa56d6d09 100644
--- a/vendor/github.com/openshift/api/authorization/v1/generated.proto
+++ b/vendor/github.com/openshift/api/authorization/v1/generated.proto
@@ -44,7 +44,7 @@ message Action {
// Content is the actual content of the request for create and update
// +kubebuilder:pruning:PreserveUnknownFields
- optional k8s.io.apimachinery.pkg.runtime.RawExtension content = 7;
+ optional .k8s.io.apimachinery.pkg.runtime.RawExtension content = 7;
}
// ClusterRole is a logical grouping of PolicyRules that can be referenced as a unit by ClusterRoleBindings.
@@ -54,7 +54,7 @@ message Action {
message ClusterRole {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// Rules holds all the PolicyRules for this ClusterRole
repeated PolicyRule rules = 2;
@@ -62,7 +62,7 @@ message ClusterRole {
// AggregationRule is an optional field that describes how to build the Rules for this ClusterRole.
// If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be
// stomped by the controller.
- optional k8s.io.api.rbac.v1.AggregationRule aggregationRule = 3;
+ optional .k8s.io.api.rbac.v1.AggregationRule aggregationRule = 3;
}
// ClusterRoleBinding references a ClusterRole, but not contain it. It can reference any ClusterRole in the same namespace or in the global namespace.
@@ -74,7 +74,7 @@ message ClusterRole {
message ClusterRoleBinding {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// UserNames holds all the usernames directly bound to the role.
// This field should only be specified when supporting legacy clients and servers.
@@ -95,12 +95,12 @@ message ClusterRoleBinding {
// Thus newer clients that do not need to support backwards compatibility should send
// only fully qualified Subjects and should omit the UserNames and GroupNames fields.
// Clients that need to support backwards compatibility can use this field to build the UserNames and GroupNames.
- repeated k8s.io.api.core.v1.ObjectReference subjects = 4;
+ repeated .k8s.io.api.core.v1.ObjectReference subjects = 4;
// RoleRef can only reference the current namespace and the global namespace.
// If the ClusterRoleRef cannot be resolved, the Authorizer must return an error.
// Since Policy is a singleton, this is sufficient knowledge to locate a role.
- optional k8s.io.api.core.v1.ObjectReference roleRef = 5;
+ optional .k8s.io.api.core.v1.ObjectReference roleRef = 5;
}
// ClusterRoleBindingList is a collection of ClusterRoleBindings
@@ -110,7 +110,7 @@ message ClusterRoleBinding {
message ClusterRoleBindingList {
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
// Items is a list of ClusterRoleBindings
repeated ClusterRoleBinding items = 2;
@@ -123,7 +123,7 @@ message ClusterRoleBindingList {
message ClusterRoleList {
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
// Items is a list of ClusterRoles
repeated ClusterRole items = 2;
@@ -140,7 +140,7 @@ message GroupRestriction {
// Selectors specifies a list of label selectors over group labels.
// +nullable
- repeated k8s.io.apimachinery.pkg.apis.meta.v1.LabelSelector labels = 2;
+ repeated .k8s.io.apimachinery.pkg.apis.meta.v1.LabelSelector labels = 2;
}
// IsPersonalSubjectAccessReview is a marker for PolicyRule.AttributeRestrictions that denotes that subjectaccessreviews on self should be allowed
@@ -157,7 +157,7 @@ message IsPersonalSubjectAccessReview {
message LocalResourceAccessReview {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 2;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 2;
// Action describes the action being tested. The Namespace element is FORCED to the current namespace.
optional Action Action = 1;
@@ -170,7 +170,7 @@ message LocalResourceAccessReview {
message LocalSubjectAccessReview {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 5;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 5;
// Action describes the action being tested. The Namespace element is FORCED to the current namespace.
optional Action Action = 1;
@@ -252,7 +252,7 @@ message PolicyRule {
// AttributeRestrictions will vary depending on what the Authorizer/AuthorizationAttributeBuilder pair supports.
// If the Authorizer does not recognize how to handle the AttributeRestrictions, the Authorizer should report an error.
// +kubebuilder:pruning:PreserveUnknownFields
- optional k8s.io.apimachinery.pkg.runtime.RawExtension attributeRestrictions = 2;
+ optional .k8s.io.apimachinery.pkg.runtime.RawExtension attributeRestrictions = 2;
// APIGroups is the name of the APIGroup that contains the resources. If this field is empty, then both kubernetes and origin API groups are assumed.
// That means that if an action is requested against one of the enumerated resources in either the kubernetes or the origin API group, the request
@@ -280,7 +280,7 @@ message PolicyRule {
message ResourceAccessReview {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 2;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 2;
// Action describes the action being tested.
optional Action Action = 1;
@@ -315,7 +315,7 @@ message ResourceAccessReviewResponse {
message Role {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// Rules holds all the PolicyRules for this Role
repeated PolicyRule rules = 2;
@@ -330,7 +330,7 @@ message Role {
message RoleBinding {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// UserNames holds all the usernames directly bound to the role.
// This field should only be specified when supporting legacy clients and servers.
@@ -351,12 +351,12 @@ message RoleBinding {
// Thus newer clients that do not need to support backwards compatibility should send
// only fully qualified Subjects and should omit the UserNames and GroupNames fields.
// Clients that need to support backwards compatibility can use this field to build the UserNames and GroupNames.
- repeated k8s.io.api.core.v1.ObjectReference subjects = 4;
+ repeated .k8s.io.api.core.v1.ObjectReference subjects = 4;
// RoleRef can only reference the current namespace and the global namespace.
// If the RoleRef cannot be resolved, the Authorizer must return an error.
// Since Policy is a singleton, this is sufficient knowledge to locate a role.
- optional k8s.io.api.core.v1.ObjectReference roleRef = 5;
+ optional .k8s.io.api.core.v1.ObjectReference roleRef = 5;
}
// RoleBindingList is a collection of RoleBindings
@@ -366,7 +366,7 @@ message RoleBinding {
message RoleBindingList {
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
// Items is a list of RoleBindings
repeated RoleBinding items = 2;
@@ -388,7 +388,7 @@ message RoleBindingList {
message RoleBindingRestriction {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// Spec defines the matcher.
optional RoleBindingRestrictionSpec spec = 2;
@@ -401,7 +401,7 @@ message RoleBindingRestriction {
message RoleBindingRestrictionList {
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
// Items is a list of RoleBindingRestriction objects.
repeated RoleBindingRestriction items = 2;
@@ -430,7 +430,7 @@ message RoleBindingRestrictionSpec {
message RoleList {
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
// Items is a list of Roles
repeated Role items = 2;
@@ -443,7 +443,7 @@ message RoleList {
message SelfSubjectRulesReview {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 3;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 3;
// Spec adds information about how to conduct the check
optional SelfSubjectRulesReviewSpec spec = 1;
@@ -491,7 +491,7 @@ message ServiceAccountRestriction {
message SubjectAccessReview {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 5;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 5;
// Action describes the action being tested.
optional Action Action = 1;
@@ -537,7 +537,7 @@ message SubjectAccessReviewResponse {
message SubjectRulesReview {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 3;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 3;
// Spec adds information about how to conduct the check
optional SubjectRulesReviewSpec spec = 1;
@@ -581,6 +581,6 @@ message UserRestriction {
// Selectors specifies a list of label selectors over user labels.
// +nullable
- repeated k8s.io.apimachinery.pkg.apis.meta.v1.LabelSelector labels = 3;
+ repeated .k8s.io.apimachinery.pkg.apis.meta.v1.LabelSelector labels = 3;
}
diff --git a/vendor/github.com/openshift/api/build/v1/generated.proto b/vendor/github.com/openshift/api/build/v1/generated.proto
index 57b54f39233d79c8a2b349b59f2e7a124be80a90..b71670f4ecb68d59f78547b2abfe3e390cf3f168 100644
--- a/vendor/github.com/openshift/api/build/v1/generated.proto
+++ b/vendor/github.com/openshift/api/build/v1/generated.proto
@@ -19,7 +19,7 @@ option go_package = "github.com/openshift/api/build/v1";
message BinaryBuildRequestOptions {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// asFile determines if the binary should be created as a file within the source rather than extracted as an archive
optional string asFile = 2;
@@ -69,7 +69,7 @@ message BitbucketWebHookCause {
message Build {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// spec is all the inputs used to execute the build.
optional BuildSpec spec = 2;
@@ -88,10 +88,10 @@ message BuildCondition {
optional string status = 2;
// The last time this condition was updated.
- optional k8s.io.apimachinery.pkg.apis.meta.v1.Time lastUpdateTime = 6;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.Time lastUpdateTime = 6;
// The last time the condition transitioned from one status to another.
- optional k8s.io.apimachinery.pkg.apis.meta.v1.Time lastTransitionTime = 3;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.Time lastTransitionTime = 3;
// The reason for the condition's last transition.
optional string reason = 4;
@@ -109,7 +109,7 @@ message BuildCondition {
message BuildConfig {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// spec holds all the input necessary to produce a new build, and the conditions when
// to trigger them.
@@ -127,7 +127,7 @@ message BuildConfig {
message BuildConfigList {
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
// items is a list of build configs
repeated BuildConfig items = 2;
@@ -178,7 +178,7 @@ message BuildConfigStatus {
message BuildList {
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
// items is a list of builds
repeated Build items = 2;
@@ -216,7 +216,7 @@ message BuildLogOptions {
// precedes the time a pod was started, only logs since the pod start will be returned.
// If this value is in the future, no logs will be returned.
// Only one of sinceSeconds or sinceTime may be specified.
- optional k8s.io.apimachinery.pkg.apis.meta.v1.Time sinceTime = 5;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.Time sinceTime = 5;
// timestamps, If true, add an RFC3339 or RFC3339Nano timestamp at the beginning of every line
// of log output. Defaults to false.
@@ -257,12 +257,12 @@ message BuildOutput {
// This value will be used to look up a container image repository to push to.
// In the case of an ImageStreamTag, the ImageStreamTag will be looked for in the namespace of
// the build unless Namespace is specified.
- optional k8s.io.api.core.v1.ObjectReference to = 1;
+ optional .k8s.io.api.core.v1.ObjectReference to = 1;
// PushSecret is the name of a Secret that would be used for setting
// up the authentication for executing the Docker push to authentication
// enabled Docker Registry (or Docker Hub).
- optional k8s.io.api.core.v1.LocalObjectReference pushSecret = 2;
+ optional .k8s.io.api.core.v1.LocalObjectReference pushSecret = 2;
// imageLabels define a list of labels that are applied to the resulting image. If there
// are multiple labels with the same name then the last one in the list is used.
@@ -366,16 +366,16 @@ message BuildPostCommitSpec {
message BuildRequest {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// revision is the information from the source for a specific repo snapshot.
optional SourceRevision revision = 2;
// triggeredByImage is the Image that triggered this build.
- optional k8s.io.api.core.v1.ObjectReference triggeredByImage = 3;
+ optional .k8s.io.api.core.v1.ObjectReference triggeredByImage = 3;
// from is the reference to the ImageStreamTag that triggered the build.
- optional k8s.io.api.core.v1.ObjectReference from = 4;
+ optional .k8s.io.api.core.v1.ObjectReference from = 4;
// binary indicates a request to build from a binary provided to the builder
optional BinaryBuildSource binary = 5;
@@ -386,7 +386,7 @@ message BuildRequest {
optional int64 lastVersion = 6;
// env contains additional environment variables you want to pass into a builder container.
- repeated k8s.io.api.core.v1.EnvVar env = 7;
+ repeated .k8s.io.api.core.v1.EnvVar env = 7;
// triggeredBy describes which triggers started the most recent update to the
// build configuration and contains information about those triggers.
@@ -439,7 +439,7 @@ message BuildSource {
// The secret contains valid credentials for remote repository, where the
// data's key represent the authentication method to be used and value is
// the base64 encoded credentials. Supported auth methods are: ssh-privatekey.
- optional k8s.io.api.core.v1.LocalObjectReference sourceSecret = 7;
+ optional .k8s.io.api.core.v1.LocalObjectReference sourceSecret = 7;
// secrets represents a list of secrets and their destinations that will
// be used only for the build.
@@ -479,13 +479,13 @@ message BuildStatus {
// startTimestamp is a timestamp representing the server time when this Build started
// running in a Pod.
// It is represented in RFC3339 form and is in UTC.
- optional k8s.io.apimachinery.pkg.apis.meta.v1.Time startTimestamp = 5;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.Time startTimestamp = 5;
// completionTimestamp is a timestamp representing the server time when this Build was
// finished, whether that build failed or succeeded. It reflects the time at which
// the Pod running the Build terminated.
// It is represented in RFC3339 form and is in UTC.
- optional k8s.io.apimachinery.pkg.apis.meta.v1.Time completionTimestamp = 6;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.Time completionTimestamp = 6;
// duration contains time.Duration object describing build time.
optional int64 duration = 7;
@@ -497,7 +497,7 @@ message BuildStatus {
optional string outputDockerImageReference = 8;
// config is an ObjectReference to the BuildConfig this Build is based on.
- optional k8s.io.api.core.v1.ObjectReference config = 9;
+ optional .k8s.io.api.core.v1.ObjectReference config = 9;
// output describes the container image the build has produced.
optional BuildStatusOutput output = 10;
@@ -677,15 +677,15 @@ message BuildVolumeSource {
// secret represents a Secret that should populate this volume.
// More info: https://kubernetes.io/docs/concepts/storage/volumes#secret
// +optional
- optional k8s.io.api.core.v1.SecretVolumeSource secret = 2;
+ optional .k8s.io.api.core.v1.SecretVolumeSource secret = 2;
// configMap represents a ConfigMap that should populate this volume
// +optional
- optional k8s.io.api.core.v1.ConfigMapVolumeSource configMap = 3;
+ optional .k8s.io.api.core.v1.ConfigMapVolumeSource configMap = 3;
// csi represents ephemeral storage provided by external CSI drivers which support this capability
// +optional
- optional k8s.io.api.core.v1.CSIVolumeSource csi = 4;
+ optional .k8s.io.api.core.v1.CSIVolumeSource csi = 4;
}
// CommonSpec encapsulates all the inputs necessary to represent a build.
@@ -709,7 +709,7 @@ message CommonSpec {
optional BuildOutput output = 5;
// resources computes resource requirements to execute the build.
- optional k8s.io.api.core.v1.ResourceRequirements resources = 6;
+ optional .k8s.io.api.core.v1.ResourceRequirements resources = 6;
// postCommit is a build hook executed after the build output image is
// committed, before it is pushed to a registry.
@@ -756,7 +756,7 @@ message CommonWebHookCause {
message ConfigMapBuildSource {
// configMap is a reference to an existing configmap that you want to use in your
// build.
- optional k8s.io.api.core.v1.LocalObjectReference configMap = 1;
+ optional .k8s.io.api.core.v1.LocalObjectReference configMap = 1;
// destinationDir is the directory where the files from the configmap should be
// available for the build time.
@@ -772,15 +772,15 @@ message ConfigMapBuildSource {
message CustomBuildStrategy {
// from is reference to an DockerImage, ImageStreamTag, or ImageStreamImage from which
// the container image should be pulled
- optional k8s.io.api.core.v1.ObjectReference from = 1;
+ optional .k8s.io.api.core.v1.ObjectReference from = 1;
// pullSecret is the name of a Secret that would be used for setting up
// the authentication for pulling the container images from the private Docker
// registries
- optional k8s.io.api.core.v1.LocalObjectReference pullSecret = 2;
+ optional .k8s.io.api.core.v1.LocalObjectReference pullSecret = 2;
// env contains additional environment variables you want to pass into a builder container.
- repeated k8s.io.api.core.v1.EnvVar env = 3;
+ repeated .k8s.io.api.core.v1.EnvVar env = 3;
// exposeDockerSocket will allow running Docker commands (and build container images) from
// inside the container.
@@ -803,19 +803,19 @@ message DockerBuildStrategy {
// from is a reference to an DockerImage, ImageStreamTag, or ImageStreamImage which overrides
// the FROM image in the Dockerfile for the build. If the Dockerfile uses multi-stage builds,
// this will replace the image in the last FROM directive of the file.
- optional k8s.io.api.core.v1.ObjectReference from = 1;
+ optional .k8s.io.api.core.v1.ObjectReference from = 1;
// pullSecret is the name of a Secret that would be used for setting up
// the authentication for pulling the container images from the private Docker
// registries
- optional k8s.io.api.core.v1.LocalObjectReference pullSecret = 2;
+ optional .k8s.io.api.core.v1.LocalObjectReference pullSecret = 2;
// noCache if set to true indicates that the container image build must be executed with the
// --no-cache=true flag
optional bool noCache = 3;
// env contains additional environment variables you want to pass into a builder container.
- repeated k8s.io.api.core.v1.EnvVar env = 4;
+ repeated .k8s.io.api.core.v1.EnvVar env = 4;
// forcePull describes if the builder should pull the images from registry prior to building.
optional bool forcePull = 5;
@@ -829,7 +829,7 @@ message DockerBuildStrategy {
// https://docs.docker.com/engine/reference/builder/#/arg for more details.
// NOTE: Only the 'name' and 'value' fields are supported. Any settings on the 'valueFrom' field
// are ignored.
- repeated k8s.io.api.core.v1.EnvVar buildArgs = 7;
+ repeated .k8s.io.api.core.v1.EnvVar buildArgs = 7;
// imageOptimizationPolicy describes what optimizations the system can use when building images
// to reduce the final size or time spent building the image. The default policy is 'None' which
@@ -854,7 +854,7 @@ message DockerBuildStrategy {
message DockerStrategyOptions {
// Args contains any build arguments that are to be passed to Docker. See
// https://docs.docker.com/engine/reference/builder/#/arg for more details
- repeated k8s.io.api.core.v1.EnvVar buildArgs = 1;
+ repeated .k8s.io.api.core.v1.EnvVar buildArgs = 1;
// noCache overrides the docker-strategy noCache option in the build config
optional bool noCache = 2;
@@ -882,7 +882,7 @@ message GenericWebHookEvent {
// env contains additional environment variables you want to pass into a builder container.
// ValueFrom is not supported.
- repeated k8s.io.api.core.v1.EnvVar env = 3;
+ repeated .k8s.io.api.core.v1.EnvVar env = 3;
// DockerStrategyOptions contains additional docker-strategy specific options for the build
optional DockerStrategyOptions dockerStrategyOptions = 4;
@@ -960,7 +960,7 @@ message ImageChangeCause {
// fromRef contains detailed information about an image that triggered a
// build.
- optional k8s.io.api.core.v1.ObjectReference fromRef = 2;
+ optional .k8s.io.api.core.v1.ObjectReference fromRef = 2;
}
// ImageChangeTrigger allows builds to be triggered when an ImageStream changes
@@ -975,7 +975,7 @@ message ImageChangeTrigger {
// It is optional. If no From is specified, the From image from the build strategy
// will be used. Only one ImageChangeTrigger with an empty From reference is allowed in
// a build configuration.
- optional k8s.io.api.core.v1.ObjectReference from = 2;
+ optional .k8s.io.api.core.v1.ObjectReference from = 2;
// paused is true if this trigger is temporarily disabled. Optional.
optional bool paused = 3;
@@ -993,7 +993,7 @@ message ImageChangeTriggerStatus {
// lastTriggerTime is the last time this particular ImageStreamTag triggered a Build to start.
// This field is only updated when this trigger specifically started a Build.
- optional k8s.io.apimachinery.pkg.apis.meta.v1.Time lastTriggerTime = 3;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.Time lastTriggerTime = 3;
}
// ImageLabel represents a label applied to the resulting image.
@@ -1015,7 +1015,7 @@ message ImageLabel {
message ImageSource {
// from is a reference to an ImageStreamTag, ImageStreamImage, or DockerImage to
// copy source from.
- optional k8s.io.api.core.v1.ObjectReference from = 1;
+ optional .k8s.io.api.core.v1.ObjectReference from = 1;
// A list of image names that this source will be used in place of during a multi-stage container image
// build. For instance, a Dockerfile that uses "COPY --from=nginx:latest" will first check for an image
@@ -1033,7 +1033,7 @@ message ImageSource {
// pullSecret is a reference to a secret to be used to pull the image from a registry
// If the image is pulled from the OpenShift registry, this field does not need to be set.
- optional k8s.io.api.core.v1.LocalObjectReference pullSecret = 3;
+ optional .k8s.io.api.core.v1.LocalObjectReference pullSecret = 3;
}
// ImageSourcePath describes a path to be copied from a source image and its destination within the build directory.
@@ -1070,7 +1070,7 @@ message JenkinsPipelineBuildStrategy {
optional string jenkinsfile = 2;
// env contains additional environment variables you want to pass into a build pipeline.
- repeated k8s.io.api.core.v1.EnvVar env = 3;
+ repeated .k8s.io.api.core.v1.EnvVar env = 3;
}
// OptionalNodeSelector is a map that may also be left nil to distinguish between set and unset.
@@ -1100,7 +1100,7 @@ message ProxyConfig {
message SecretBuildSource {
// secret is a reference to an existing secret that you want to use in your
// build.
- optional k8s.io.api.core.v1.LocalObjectReference secret = 1;
+ optional .k8s.io.api.core.v1.LocalObjectReference secret = 1;
// destinationDir is the directory where the files from the secret should be
// available for the build time.
@@ -1122,7 +1122,7 @@ message SecretLocalReference {
// SecretSpec specifies a secret to be included in a build pod and its corresponding mount point
message SecretSpec {
// secretSource is a reference to the secret
- optional k8s.io.api.core.v1.LocalObjectReference secretSource = 1;
+ optional .k8s.io.api.core.v1.LocalObjectReference secretSource = 1;
// mountPath is the path at which to mount the secret
optional string mountPath = 2;
@@ -1132,15 +1132,15 @@ message SecretSpec {
message SourceBuildStrategy {
// from is reference to an DockerImage, ImageStreamTag, or ImageStreamImage from which
// the container image should be pulled
- optional k8s.io.api.core.v1.ObjectReference from = 1;
+ optional .k8s.io.api.core.v1.ObjectReference from = 1;
// pullSecret is the name of a Secret that would be used for setting up
// the authentication for pulling the container images from the private Docker
// registries
- optional k8s.io.api.core.v1.LocalObjectReference pullSecret = 2;
+ optional .k8s.io.api.core.v1.LocalObjectReference pullSecret = 2;
// env contains additional environment variables you want to pass into a builder container.
- repeated k8s.io.api.core.v1.EnvVar env = 3;
+ repeated .k8s.io.api.core.v1.EnvVar env = 3;
// scripts is the location of Source scripts
optional string scripts = 4;
@@ -1193,7 +1193,7 @@ message StageInfo {
// startTime is a timestamp representing the server time when this Stage started.
// It is represented in RFC3339 form and is in UTC.
- optional k8s.io.apimachinery.pkg.apis.meta.v1.Time startTime = 2;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.Time startTime = 2;
// durationMilliseconds identifies how long the stage took
// to complete in milliseconds.
@@ -1213,7 +1213,7 @@ message StepInfo {
// startTime is a timestamp representing the server time when this Step started.
// it is represented in RFC3339 form and is in UTC.
- optional k8s.io.apimachinery.pkg.apis.meta.v1.Time startTime = 2;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.Time startTime = 2;
// durationMilliseconds identifies how long the step took
// to complete in milliseconds.
diff --git a/vendor/github.com/openshift/api/cloudnetwork/v1/generated.proto b/vendor/github.com/openshift/api/cloudnetwork/v1/generated.proto
index dc4557883fcf6c78f26a8edb4a6e6b4bf40b2226..085b49b25e874f2009c77a547fae52c6cc67b541 100644
--- a/vendor/github.com/openshift/api/cloudnetwork/v1/generated.proto
+++ b/vendor/github.com/openshift/api/cloudnetwork/v1/generated.proto
@@ -37,7 +37,7 @@ option go_package = "github.com/openshift/api/cloudnetwork/v1";
message CloudPrivateIPConfig {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// spec is the definition of the desired private IP request.
// +kubebuilder:validation:Required
@@ -58,7 +58,7 @@ message CloudPrivateIPConfig {
message CloudPrivateIPConfigList {
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
// List of CloudPrivateIPConfig.
repeated CloudPrivateIPConfig items = 2;
@@ -84,6 +84,6 @@ message CloudPrivateIPConfigStatus {
// condition is the assignment condition of the private IP and its status
// +kubebuilder:validation:Required
// +required
- repeated k8s.io.apimachinery.pkg.apis.meta.v1.Condition conditions = 2;
+ repeated .k8s.io.apimachinery.pkg.apis.meta.v1.Condition conditions = 2;
}
diff --git a/vendor/github.com/openshift/api/config/v1/types_cluster_version.go b/vendor/github.com/openshift/api/config/v1/types_cluster_version.go
index 61386a72e496d204ef509745f911eae734ea091c..24e0b2f0931239c67b59929c4a2a45fe8cae52f9 100644
--- a/vendor/github.com/openshift/api/config/v1/types_cluster_version.go
+++ b/vendor/github.com/openshift/api/config/v1/types_cluster_version.go
@@ -288,7 +288,7 @@ const (
)
// ClusterVersionCapability enumerates optional, core cluster components.
-// +kubebuilder:validation:Enum=openshift-samples;baremetal;marketplace;Console;Insights;Storage;CSISnapshot;NodeTuning;MachineAPI;Build;DeploymentConfig;ImageRegistry;OperatorLifecycleManager;CloudCredential;Ingress;CloudControllerManager
+// +kubebuilder:validation:Enum=openshift-samples;baremetal;marketplace;Console;Insights;Storage;CSISnapshot;NodeTuning;MachineAPI;Build;DeploymentConfig;ImageRegistry;OperatorLifecycleManager;CloudCredential;Ingress;CloudControllerManager;OperatorLifecycleManagerV1
type ClusterVersionCapability string
const (
@@ -379,10 +379,14 @@ const (
// allows to distribute Docker images
ClusterVersionCapabilityImageRegistry ClusterVersionCapability = "ImageRegistry"
- // ClusterVersionCapabilityOperatorLifecycleManager manages the Operator Lifecycle Manager
+ // ClusterVersionCapabilityOperatorLifecycleManager manages the Operator Lifecycle Manager (legacy)
// which itself manages the lifecycle of operators
ClusterVersionCapabilityOperatorLifecycleManager ClusterVersionCapability = "OperatorLifecycleManager"
+ // ClusterVersionCapabilityOperatorLifecycleManagerV1 manages the Operator Lifecycle Manager (v1)
+ // which itself manages the lifecycle of operators
+ ClusterVersionCapabilityOperatorLifecycleManagerV1 ClusterVersionCapability = "OperatorLifecycleManagerV1"
+
// ClusterVersionCapabilityCloudCredential manages credentials for cloud providers
// in openshift cluster
ClusterVersionCapabilityCloudCredential ClusterVersionCapability = "CloudCredential"
@@ -422,6 +426,7 @@ var KnownClusterVersionCapabilities = []ClusterVersionCapability{
ClusterVersionCapabilityDeploymentConfig,
ClusterVersionCapabilityImageRegistry,
ClusterVersionCapabilityOperatorLifecycleManager,
+ ClusterVersionCapabilityOperatorLifecycleManagerV1,
ClusterVersionCapabilityCloudCredential,
ClusterVersionCapabilityIngress,
ClusterVersionCapabilityCloudControllerManager,
@@ -600,6 +605,7 @@ var ClusterVersionCapabilitySets = map[ClusterVersionCapabilitySet][]ClusterVers
ClusterVersionCapabilityDeploymentConfig,
ClusterVersionCapabilityImageRegistry,
ClusterVersionCapabilityOperatorLifecycleManager,
+ ClusterVersionCapabilityOperatorLifecycleManagerV1,
ClusterVersionCapabilityCloudCredential,
ClusterVersionCapabilityIngress,
ClusterVersionCapabilityCloudControllerManager,
@@ -618,6 +624,7 @@ var ClusterVersionCapabilitySets = map[ClusterVersionCapabilitySet][]ClusterVers
ClusterVersionCapabilityDeploymentConfig,
ClusterVersionCapabilityImageRegistry,
ClusterVersionCapabilityOperatorLifecycleManager,
+ ClusterVersionCapabilityOperatorLifecycleManagerV1,
ClusterVersionCapabilityCloudCredential,
ClusterVersionCapabilityIngress,
ClusterVersionCapabilityCloudControllerManager,
diff --git a/vendor/github.com/openshift/api/config/v1/types_infrastructure.go b/vendor/github.com/openshift/api/config/v1/types_infrastructure.go
index 392d128c111777a5ee423039e3c025668df9d980..bc7b85b77a56ed56200df3e89539982e2c9e293e 100644
--- a/vendor/github.com/openshift/api/config/v1/types_infrastructure.go
+++ b/vendor/github.com/openshift/api/config/v1/types_infrastructure.go
@@ -507,6 +507,20 @@ type AWSPlatformStatus struct {
// +listType=atomic
// +optional
ResourceTags []AWSResourceTag `json:"resourceTags,omitempty"`
+
+ // cloudLoadBalancerConfig holds configuration related to DNS and cloud
+ // load balancers. It allows configuration of in-cluster DNS as an alternative
+ // to the platform default DNS implementation.
+ // When using the ClusterHosted DNS type, Load Balancer IP addresses
+ // must be provided for the API and internal API load balancers as well as the
+ // ingress load balancer.
+ //
+ // +default={"dnsType": "PlatformDefault"}
+ // +kubebuilder:default={"dnsType": "PlatformDefault"}
+ // +openshift:enable:FeatureGate=AWSClusterHostedDNS
+ // +optional
+ // +nullable
+ CloudLoadBalancerConfig *CloudLoadBalancerConfig `json:"cloudLoadBalancerConfig,omitempty"`
}
// AWSResourceTag is a tag to apply to AWS resources created for the cluster.
@@ -647,12 +661,12 @@ type GCPPlatformStatus struct {
// Tombstone the field as a reminder.
// ClusterHostedDNS ClusterHostedDNS `json:"clusterHostedDNS,omitempty"`
- // cloudLoadBalancerConfig is a union that contains the IP addresses of API,
- // API-Int and Ingress Load Balancers created on the cloud platform. These
- // values would not be populated on on-prem platforms. These Load Balancer
- // IPs are used to configure the in-cluster DNS instances for API, API-Int
- // and Ingress services. `dnsType` is expected to be set to `ClusterHosted`
- // when these Load Balancer IP addresses are populated and used.
+ // cloudLoadBalancerConfig holds configuration related to DNS and cloud
+ // load balancers. It allows configuration of in-cluster DNS as an alternative
+ // to the platform default DNS implementation.
+ // When using the ClusterHosted DNS type, Load Balancer IP addresses
+ // must be provided for the API and internal API load balancers as well as the
+ // ingress load balancer.
//
// +default={"dnsType": "PlatformDefault"}
// +kubebuilder:default={"dnsType": "PlatformDefault"}
@@ -1579,7 +1593,7 @@ type PowerVSServiceEndpoint struct {
// Power Cloud - https://cloud.ibm.com/apidocs/power-cloud
//
// +kubebuilder:validation:Required
- // +kubebuilder:validation:Pattern=`^[a-z0-9-]+$`
+ // +kubebuilder:validation:Enum=CIS;COS;COSConfig;DNSServices;GlobalCatalog;GlobalSearch;GlobalTagging;HyperProtect;IAM;KeyProtect;Power;ResourceController;ResourceManager;VPC
Name string `json:"name"`
// url is fully qualified URI with scheme https, that overrides the default generated
@@ -1725,6 +1739,7 @@ type NutanixPlatformSpec struct {
// failureDomains configures failure domains information for the Nutanix platform.
// When set, the failure domains defined here may be used to spread Machines across
// prism element clusters to improve fault tolerance of the cluster.
+ // +openshift:validation:FeatureGateAwareMaxItems:featureGate=NutanixMultiSubnets,maxItems=32
// +listType=map
// +listMapKey=name
// +optional
@@ -1751,13 +1766,15 @@ type NutanixFailureDomain struct {
Cluster NutanixResourceIdentifier `json:"cluster"`
// subnets holds a list of identifiers (one or more) of the cluster's network subnets
+ // If the feature gate NutanixMultiSubnets is enabled, up to 32 subnets may be configured.
// for the Machine's VM to connect to. The subnet identifiers (uuid or name) can be
// obtained from the Prism Central console or using the prism_central API.
// +kubebuilder:validation:Required
// +kubebuilder:validation:MinItems=1
- // +kubebuilder:validation:MaxItems=1
- // +listType=map
- // +listMapKey=type
+ // +openshift:validation:FeatureGateAwareMaxItems:featureGate="",maxItems=1
+ // +openshift:validation:FeatureGateAwareMaxItems:featureGate=NutanixMultiSubnets,maxItems=32
+ // +openshift:validation:FeatureGateAwareXValidation:featureGate=NutanixMultiSubnets,rule="self.all(x, self.exists_one(y, x == y))",message="each subnet must be unique"
+ // +listType=atomic
Subnets []NutanixResourceIdentifier `json:"subnets"`
}
diff --git a/vendor/github.com/openshift/api/config/v1/types_node.go b/vendor/github.com/openshift/api/config/v1/types_node.go
index b3b1b62c4dfc9f479ca3d60e4f3d9a7e7921c177..a50328c91f6e9b66c7cf509531fae30dc5996230 100644
--- a/vendor/github.com/openshift/api/config/v1/types_node.go
+++ b/vendor/github.com/openshift/api/config/v1/types_node.go
@@ -46,6 +46,25 @@ type NodeSpec struct {
// the status and corresponding reaction of the cluster
// +optional
WorkerLatencyProfile WorkerLatencyProfileType `json:"workerLatencyProfile,omitempty"`
+
+ // minimumKubeletVersion is the lowest version of a kubelet that can join the cluster.
+ // Specifically, the apiserver will deny most authorization requests of kubelets that are older
+ // than the specified version, only allowing the kubelet to get and update its node object, and perform
+ // subjectaccessreviews.
+ // This means any kubelet that attempts to join the cluster will not be able to run any assigned workloads,
+ // and will eventually be marked as not ready.
+ // Its max length is 8, so maximum version allowed is either "9.999.99" or "99.99.99".
+ // Since the kubelet reports the version of the kubernetes release, not Openshift, this field references
+ // the underlying kubernetes version this version of Openshift is based off of.
+ // In other words: if an admin wishes to ensure no nodes run an older version than Openshift 4.17, then
+ // they should set the minimumKubeletVersion to 1.30.0.
+ // When comparing versions, the kubelet's version is stripped of any contents outside of major.minor.patch version.
+ // Thus, a kubelet with version "1.0.0-ec.0" will be compatible with minimumKubeletVersion "1.0.0" or earlier.
+ // +kubebuilder:validation:XValidation:rule="self == \"\" || self.matches('^[0-9]*.[0-9]*.[0-9]*$')",message="minmumKubeletVersion must be in a semver compatible format of x.y.z, or empty"
+ // +kubebuilder:validation:MaxLength:=8
+ // +openshift:enable:FeatureGate=MinimumKubeletVersion
+ // +optional
+ MinimumKubeletVersion string `json:"minimumKubeletVersion"`
}
type NodeStatus struct {
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_00_cluster-version-operator_01_clusteroperators.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_00_cluster-version-operator_01_clusteroperators.crd.yaml
index b31121980ae254cf33fcd504794c6415b5edff35..1cc395e74b69a017efc997b51909e119b2634c61 100644
--- a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_00_cluster-version-operator_01_clusteroperators.crd.yaml
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_00_cluster-version-operator_01_clusteroperators.crd.yaml
@@ -41,21 +41,27 @@ spec:
name: v1
schema:
openAPIV3Schema:
- description: "ClusterOperator is the Custom Resource object which holds the
- current state of an operator. This object is used by operators to convey
- their state to the rest of the cluster. \n Compatibility level 1: Stable
- within a major release for a minimum of 12 months or 3 minor releases (whichever
- is longer)."
+ description: |-
+ ClusterOperator is the Custom Resource object which holds the current state
+ of an operator. This object is used by operators to convey their state to
+ the rest of the cluster.
+
+ Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -63,15 +69,17 @@ spec:
description: spec holds configuration that could apply to any operator.
type: object
status:
- description: status holds the information about the state of an operator. It
- is consistent with status information across the Kubernetes ecosystem.
+ description: |-
+ status holds the information about the state of an operator. It is consistent with status information across
+ the Kubernetes ecosystem.
properties:
conditions:
description: conditions describes the state of the operator's managed
and monitored components.
items:
- description: ClusterOperatorStatusCondition represents the state
- of the operator's managed and monitored components.
+ description: |-
+ ClusterOperatorStatusCondition represents the state of the operator's
+ managed and monitored components.
properties:
lastTransitionTime:
description: lastTransitionTime is the time of the last update
@@ -79,10 +87,10 @@ spec:
format: date-time
type: string
message:
- description: message provides additional information about the
- current condition. This is only to be consumed by humans. It
- may contain Line Feed characters (U+000A), which should be
- rendered as new lines.
+ description: |-
+ message provides additional information about the current condition.
+ This is only to be consumed by humans. It may contain Line Feed
+ characters (U+000A), which should be rendered as new lines.
type: string
reason:
description: reason is the CamelCase reason for the condition's
@@ -101,15 +109,18 @@ spec:
type: object
type: array
extension:
- description: extension contains any additional status information
- specific to the operator which owns this status object.
+ description: |-
+ extension contains any additional status information specific to the
+ operator which owns this status object.
nullable: true
type: object
x-kubernetes-preserve-unknown-fields: true
relatedObjects:
- description: 'relatedObjects is a list of objects that are "interesting"
- or related to this operator. Common uses are: 1. the detailed resource
- driving the operator 2. operator namespaces 3. operand namespaces'
+ description: |-
+ relatedObjects is a list of objects that are "interesting" or related to this operator. Common uses are:
+ 1. the detailed resource driving the operator
+ 2. operator namespaces
+ 3. operand namespaces
items:
description: ObjectReference contains enough information to let
you inspect or modify the referred object.
@@ -133,12 +144,10 @@ spec:
type: object
type: array
versions:
- description: versions is a slice of operator and operand version tuples. Operators
- which manage multiple operands will have multiple operand entries
- in the array. Available operators must report the version of the
- operator itself with the name "operator". An operator reports a
- new "operator" version when it has rolled out the new version to
- all of its operands.
+ description: |-
+ versions is a slice of operator and operand version tuples. Operators which manage multiple operands will have multiple
+ operand entries in the array. Available operators must report the version of the operator itself with the name "operator".
+ An operator reports a new "operator" version when it has rolled out the new version to all of its operands.
items:
properties:
name:
@@ -147,10 +156,10 @@ spec:
operators.
type: string
version:
- description: version indicates which version of a particular
- operand is currently being managed. It must always match
- the Available operand. If 1.0.0 is Available, then this must
- indicate 1.0.0 even if the operator is trying to rollout 1.1.0
+ description: |-
+ version indicates which version of a particular operand is currently being managed. It must always match the Available
+ operand. If 1.0.0 is Available, then this must indicate 1.0.0 even if the operator is trying to rollout
+ 1.1.0
type: string
required:
- name
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_00_cluster-version-operator_01_clusterversions-CustomNoUpgrade.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_00_cluster-version-operator_01_clusterversions-CustomNoUpgrade.crd.yaml
index 4e4a3ca3b1c95c95cee025262db8fecb66d4dff0..a55e2937ed2db19df82d549dd6f302f537860b89 100644
--- a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_00_cluster-version-operator_01_clusterversions-CustomNoUpgrade.crd.yaml
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_00_cluster-version-operator_01_clusterversions-CustomNoUpgrade.crd.yaml
@@ -35,36 +35,45 @@ spec:
name: v1
schema:
openAPIV3Schema:
- description: "ClusterVersion is the configuration for the ClusterVersionOperator.
- This is where parameters related to automatic updates can be set. \n Compatibility
- level 1: Stable within a major release for a minimum of 12 months or 3 minor
- releases (whichever is longer)."
+ description: |-
+ ClusterVersion is the configuration for the ClusterVersionOperator. This is where
+ parameters related to automatic updates can be set.
+
+ Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
spec:
- description: spec is the desired state of the cluster version - the operator
- will work to ensure that the desired version is applied to the cluster.
+ description: |-
+ spec is the desired state of the cluster version - the operator will work
+ to ensure that the desired version is applied to the cluster.
properties:
capabilities:
- description: capabilities configures the installation of optional,
- core cluster components. A null value here is identical to an empty
- object; see the child properties for default semantics.
+ description: |-
+ capabilities configures the installation of optional, core
+ cluster components. A null value here is identical to an
+ empty object; see the child properties for default semantics.
properties:
additionalEnabledCapabilities:
- description: additionalEnabledCapabilities extends the set of
- managed capabilities beyond the baseline defined in baselineCapabilitySet. The
- default is an empty set.
+ description: |-
+ additionalEnabledCapabilities extends the set of managed
+ capabilities beyond the baseline defined in
+ baselineCapabilitySet. The default is an empty set.
items:
description: ClusterVersionCapability enumerates optional, core
cluster components.
@@ -85,14 +94,17 @@ spec:
- CloudCredential
- Ingress
- CloudControllerManager
+ - OperatorLifecycleManagerV1
type: string
type: array
x-kubernetes-list-type: atomic
baselineCapabilitySet:
- description: baselineCapabilitySet selects an initial set of optional
- capabilities to enable, which can be extended via additionalEnabledCapabilities. If
- unset, the cluster will choose a default, and the default may
- change over time. The current default is vCurrent.
+ description: |-
+ baselineCapabilitySet selects an initial set of
+ optional capabilities to enable, which can be extended via
+ additionalEnabledCapabilities. If unset, the cluster will
+ choose a default, and the default may change over time.
+ The current default is vCurrent.
enum:
- None
- v4.11
@@ -107,74 +119,76 @@ spec:
type: string
type: object
channel:
- description: channel is an identifier for explicitly requesting that
- a non-default set of updates be applied to this cluster. The default
- channel will be contain stable updates that are appropriate for
- production clusters.
+ description: |-
+ channel is an identifier for explicitly requesting that a non-default
+ set of updates be applied to this cluster. The default channel will be
+ contain stable updates that are appropriate for production clusters.
type: string
clusterID:
- description: clusterID uniquely identifies this cluster. This is expected
- to be an RFC4122 UUID value (xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
- in hexadecimal values). This is a required field.
+ description: |-
+ clusterID uniquely identifies this cluster. This is expected to be
+ an RFC4122 UUID value (xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx in
+ hexadecimal values). This is a required field.
type: string
desiredUpdate:
- description: "desiredUpdate is an optional field that indicates the
- desired value of the cluster version. Setting this value will trigger
- an upgrade (if the current version does not match the desired version).
- The set of recommended update values is listed as part of available
- updates in status, and setting values outside that range may cause
- the upgrade to fail. \n Some of the fields are inter-related with
- restrictions and meanings described here. 1. image is specified,
- version is specified, architecture is specified. API validation
- error. 2. image is specified, version is specified, architecture
- is not specified. You should not do this. version is silently ignored
- and image is used. 3. image is specified, version is not specified,
- architecture is specified. API validation error. 4. image is specified,
- version is not specified, architecture is not specified. image is
- used. 5. image is not specified, version is specified, architecture
- is specified. version and desired architecture are used to select
- an image. 6. image is not specified, version is specified, architecture
- is not specified. version and current architecture are used to select
- an image. 7. image is not specified, version is not specified, architecture
- is specified. API validation error. 8. image is not specified, version
- is not specified, architecture is not specified. API validation
- error. \n If an upgrade fails the operator will halt and report
- status about the failing component. Setting the desired update value
- back to the previous version will cause a rollback to be attempted.
- Not all rollbacks will succeed."
+ description: |-
+ desiredUpdate is an optional field that indicates the desired value of
+ the cluster version. Setting this value will trigger an upgrade (if
+ the current version does not match the desired version). The set of
+ recommended update values is listed as part of available updates in
+ status, and setting values outside that range may cause the upgrade
+ to fail.
+
+ Some of the fields are inter-related with restrictions and meanings described here.
+ 1. image is specified, version is specified, architecture is specified. API validation error.
+ 2. image is specified, version is specified, architecture is not specified. You should not do this. version is silently ignored and image is used.
+ 3. image is specified, version is not specified, architecture is specified. API validation error.
+ 4. image is specified, version is not specified, architecture is not specified. image is used.
+ 5. image is not specified, version is specified, architecture is specified. version and desired architecture are used to select an image.
+ 6. image is not specified, version is specified, architecture is not specified. version and current architecture are used to select an image.
+ 7. image is not specified, version is not specified, architecture is specified. API validation error.
+ 8. image is not specified, version is not specified, architecture is not specified. API validation error.
+
+ If an upgrade fails the operator will halt and report status
+ about the failing component. Setting the desired update value back to
+ the previous version will cause a rollback to be attempted. Not all
+ rollbacks will succeed.
properties:
architecture:
- description: architecture is an optional field that indicates
- the desired value of the cluster architecture. In this context
- cluster architecture means either a single architecture or a
- multi architecture. architecture can only be set to Multi thereby
+ description: |-
+ architecture is an optional field that indicates the desired
+ value of the cluster architecture. In this context cluster
+ architecture means either a single architecture or a multi
+ architecture. architecture can only be set to Multi thereby
only allowing updates from single to multi architecture. If
architecture is set, image cannot be set and version must be
- set. Valid values are 'Multi' and empty.
+ set.
+ Valid values are 'Multi' and empty.
enum:
- Multi
- ""
type: string
force:
- description: force allows an administrator to update to an image
- that has failed verification or upgradeable checks. This option
- should only be used when the authenticity of the provided image
- has been verified out of band because the provided image will
- run with full administrative access to the cluster. Do not use
- this flag with images that comes from unknown or potentially
- malicious sources.
+ description: |-
+ force allows an administrator to update to an image that has failed
+ verification or upgradeable checks. This option should only
+ be used when the authenticity of the provided image has been verified out
+ of band because the provided image will run with full administrative access
+ to the cluster. Do not use this flag with images that comes from unknown
+ or potentially malicious sources.
type: boolean
image:
- description: image is a container image location that contains
- the update. image should be used when the desired version does
- not exist in availableUpdates or history. When image is set,
- version is ignored. When image is set, version should be empty.
+ description: |-
+ image is a container image location that contains the update.
+ image should be used when the desired version does not exist in availableUpdates or history.
+ When image is set, version is ignored. When image is set, version should be empty.
When image is set, architecture cannot be specified.
type: string
version:
- description: version is a semantic version identifying the update
- version. version is ignored if image is specified and required
- if architecture is specified.
+ description: |-
+ version is a semantic version identifying the update version.
+ version is ignored if image is specified and required if
+ architecture is specified.
type: string
type: object
x-kubernetes-validations:
@@ -185,12 +199,14 @@ spec:
rule: 'has(self.architecture) && self.architecture != '''' ? self.version
!= '''' : true'
overrides:
- description: overrides is list of overides for components that are
- managed by cluster version operator. Marking a component unmanaged
- will prevent the operator from creating or updating the object.
+ description: |-
+ overrides is list of overides for components that are managed by
+ cluster version operator. Marking a component unmanaged will prevent
+ the operator from creating or updating the object.
items:
- description: ComponentOverride allows overriding cluster version
- operator's behavior for a component.
+ description: |-
+ ComponentOverride allows overriding cluster version operator's behavior
+ for a component.
properties:
group:
description: group identifies the API group that the kind is
@@ -203,13 +219,15 @@ spec:
description: name is the component's name.
type: string
namespace:
- description: namespace is the component's namespace. If the
- resource is cluster scoped, the namespace should be empty.
+ description: |-
+ namespace is the component's namespace. If the resource is cluster
+ scoped, the namespace should be empty.
type: string
unmanaged:
- description: 'unmanaged controls if cluster version operator
- should stop managing the resources in this cluster. Default:
- false'
+ description: |-
+ unmanaged controls if cluster version operator should stop managing the
+ resources in this cluster.
+ Default: false
type: boolean
required:
- group
@@ -226,33 +244,31 @@ spec:
- name
x-kubernetes-list-type: map
signatureStores:
- description: "signatureStores contains the upstream URIs to verify
- release signatures and optional reference to a config map by name
- containing the PEM-encoded CA bundle. \n By default, CVO will use
- existing signature stores if this property is empty. The CVO will
- check the release signatures in the local ConfigMaps first. It will
- search for a valid signature in these stores in parallel only when
- local ConfigMaps did not include a valid signature. Validation will
- fail if none of the signature stores reply with valid signature
- before timeout. Setting signatureStores will replace the default
- signature stores with custom signature stores. Default stores can
- be used with custom signature stores by adding them manually. \n
- A maximum of 32 signature stores may be configured."
+ description: |-
+ signatureStores contains the upstream URIs to verify release signatures and optional
+ reference to a config map by name containing the PEM-encoded CA bundle.
+
+ By default, CVO will use existing signature stores if this property is empty.
+ The CVO will check the release signatures in the local ConfigMaps first. It will search for a valid signature
+ in these stores in parallel only when local ConfigMaps did not include a valid signature.
+ Validation will fail if none of the signature stores reply with valid signature before timeout.
+ Setting signatureStores will replace the default signature stores with custom signature stores.
+ Default stores can be used with custom signature stores by adding them manually.
+
+ A maximum of 32 signature stores may be configured.
items:
description: SignatureStore represents the URL of custom Signature
Store
properties:
ca:
- description: ca is an optional reference to a config map by
- name containing the PEM-encoded CA bundle. It is used as a
- trust anchor to validate the TLS certificate presented by
- the remote server. The key "ca.crt" is used to locate the
- data. If specified and the config map or expected key is not
- found, the signature store is not honored. If the specified
- ca data is not valid, the signature store is not honored.
- If empty, we fall back to the CA configured via Proxy, which
- is appended to the default system roots. The namespace for
- this config map is openshift-config.
+ description: |-
+ ca is an optional reference to a config map by name containing the PEM-encoded CA bundle.
+ It is used as a trust anchor to validate the TLS certificate presented by the remote server.
+ The key "ca.crt" is used to locate the data.
+ If specified and the config map or expected key is not found, the signature store is not honored.
+ If the specified ca data is not valid, the signature store is not honored.
+ If empty, we fall back to the CA configured via Proxy, which is appended to the default system roots.
+ The namespace for this config map is openshift-config.
properties:
name:
description: name is the metadata.name of the referenced
@@ -262,10 +278,10 @@ spec:
- name
type: object
url:
- description: url contains the upstream custom signature store
- URL. url should be a valid absolute http/https URI of an upstream
- signature store as per rfc1738. This must be provided and
- cannot be empty.
+ description: |-
+ url contains the upstream custom signature store URL.
+ url should be a valid absolute http/https URI of an upstream signature store as per rfc1738.
+ This must be provided and cannot be empty.
type: string
x-kubernetes-validations:
- message: url must be a valid absolute URL
@@ -279,52 +295,59 @@ spec:
- url
x-kubernetes-list-type: map
upstream:
- description: upstream may be used to specify the preferred update
- server. By default it will use the appropriate update server for
- the cluster and region.
+ description: |-
+ upstream may be used to specify the preferred update server. By default
+ it will use the appropriate update server for the cluster and region.
type: string
required:
- clusterID
type: object
status:
- description: status contains information about the available updates and
- any in-progress updates.
+ description: |-
+ status contains information about the available updates and any in-progress
+ updates.
properties:
availableUpdates:
- description: availableUpdates contains updates recommended for this
- cluster. Updates which appear in conditionalUpdates but not in availableUpdates
- may expose this cluster to known issues. This list may be empty
- if no updates are recommended, if the update service is unavailable,
- or if an invalid channel has been specified.
+ description: |-
+ availableUpdates contains updates recommended for this
+ cluster. Updates which appear in conditionalUpdates but not in
+ availableUpdates may expose this cluster to known issues. This list
+ may be empty if no updates are recommended, if the update service
+ is unavailable, or if an invalid channel has been specified.
items:
description: Release represents an OpenShift release image and associated
metadata.
properties:
channels:
- description: channels is the set of Cincinnati channels to which
- the release currently belongs.
+ description: |-
+ channels is the set of Cincinnati channels to which the release
+ currently belongs.
items:
type: string
type: array
x-kubernetes-list-type: set
image:
- description: image is a container image location that contains
- the update. When this field is part of spec, image is optional
- if version is specified and the availableUpdates field contains
- a matching version.
+ description: |-
+ image is a container image location that contains the update. When this
+ field is part of spec, image is optional if version is specified and the
+ availableUpdates field contains a matching version.
type: string
url:
- description: url contains information about this release. This
- URL is set by the 'url' metadata property on a release or
- the metadata returned by the update API and should be displayed
- as a link in user interfaces. The URL field may not be set
- for test or nightly releases.
+ description: |-
+ url contains information about this release. This URL is set by
+ the 'url' metadata property on a release or the metadata returned by
+ the update API and should be displayed as a link in user
+ interfaces. The URL field may not be set for test or nightly
+ releases.
type: string
version:
- description: version is a semantic version identifying the update
- version. When this field is part of spec, version is optional
- if image is specified.
+ description: |-
+ version is a semantic version identifying the update version. When this
+ field is part of spec, version is optional if image is specified.
type: string
+ required:
+ - image
+ - version
type: object
nullable: true
type: array
@@ -356,6 +379,7 @@ spec:
- CloudCredential
- Ingress
- CloudControllerManager
+ - OperatorLifecycleManagerV1
type: string
type: array
x-kubernetes-list-type: atomic
@@ -382,69 +406,62 @@ spec:
- CloudCredential
- Ingress
- CloudControllerManager
+ - OperatorLifecycleManagerV1
type: string
type: array
x-kubernetes-list-type: atomic
type: object
conditionalUpdates:
- description: conditionalUpdates contains the list of updates that
- may be recommended for this cluster if it meets specific required
+ description: |-
+ conditionalUpdates contains the list of updates that may be
+ recommended for this cluster if it meets specific required
conditions. Consumers interested in the set of updates that are
- actually recommended for this cluster should use availableUpdates.
- This list may be empty if no updates are recommended, if the update
- service is unavailable, or if an empty or invalid channel has been
- specified.
+ actually recommended for this cluster should use
+ availableUpdates. This list may be empty if no updates are
+ recommended, if the update service is unavailable, or if an empty
+ or invalid channel has been specified.
items:
- description: ConditionalUpdate represents an update which is recommended
- to some clusters on the version the current cluster is reconciling,
- but which may not be recommended for the current cluster.
+ description: |-
+ ConditionalUpdate represents an update which is recommended to some
+ clusters on the version the current cluster is reconciling, but which
+ may not be recommended for the current cluster.
properties:
conditions:
- description: 'conditions represents the observations of the
- conditional update''s current status. Known types are: * Recommended,
- for whether the update is recommended for the current cluster.'
+ description: |-
+ conditions represents the observations of the conditional update's
+ current status. Known types are:
+ * Recommended, for whether the update is recommended for the current cluster.
items:
- description: "Condition contains details for one aspect of
- the current state of this API Resource. --- This struct
- is intended for direct use as an array at the field path
- .status.conditions. For example, \n type FooStatus struct{
- // Represents the observations of a foo's current state.
- // Known .status.conditions.type are: \"Available\", \"Progressing\",
- and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge
- // +listType=map // +listMapKey=type Conditions []metav1.Condition
- `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\"
- protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields
- }"
+ description: Condition contains details for one aspect of
+ the current state of this API Resource.
properties:
lastTransitionTime:
- description: lastTransitionTime is the last time the condition
- transitioned from one status to another. This should
- be when the underlying condition changed. If that is
- not known, then using the time when the API field changed
- is acceptable.
+ description: |-
+ lastTransitionTime is the last time the condition transitioned from one status to another.
+ This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.
format: date-time
type: string
message:
- description: message is a human readable message indicating
- details about the transition. This may be an empty string.
+ description: |-
+ message is a human readable message indicating details about the transition.
+ This may be an empty string.
maxLength: 32768
type: string
observedGeneration:
- description: observedGeneration represents the .metadata.generation
- that the condition was set based upon. For instance,
- if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration
- is 9, the condition is out of date with respect to the
- current state of the instance.
+ description: |-
+ observedGeneration represents the .metadata.generation that the condition was set based upon.
+ For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
+ with respect to the current state of the instance.
format: int64
minimum: 0
type: integer
reason:
- description: reason contains a programmatic identifier
- indicating the reason for the condition's last transition.
- Producers of specific condition types may define expected
- values and meanings for this field, and whether the
- values are considered a guaranteed API. The value should
- be a CamelCase string. This field may not be empty.
+ description: |-
+ reason contains a programmatic identifier indicating the reason for the condition's last transition.
+ Producers of specific condition types may define expected values and meanings for this field,
+ and whether the values are considered a guaranteed API.
+ The value should be a CamelCase string.
+ This field may not be empty.
maxLength: 1024
minLength: 1
pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
@@ -459,11 +476,6 @@ spec:
type: string
type:
description: type of condition in CamelCase or in foo.example.com/CamelCase.
- --- Many .condition.type values are consistent across
- resources like Available, but because arbitrary conditions
- can be useful (see .node.status.conditions), the ability
- to deconflict is important. The regex it matches is
- (dns1123SubdomainFmt/)?(qualifiedNameFmt)
maxLength: 316
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
@@ -482,75 +494,82 @@ spec:
description: release is the target of the update.
properties:
channels:
- description: channels is the set of Cincinnati channels
- to which the release currently belongs.
+ description: |-
+ channels is the set of Cincinnati channels to which the release
+ currently belongs.
items:
type: string
type: array
x-kubernetes-list-type: set
image:
- description: image is a container image location that contains
- the update. When this field is part of spec, image is
- optional if version is specified and the availableUpdates
- field contains a matching version.
+ description: |-
+ image is a container image location that contains the update. When this
+ field is part of spec, image is optional if version is specified and the
+ availableUpdates field contains a matching version.
type: string
url:
- description: url contains information about this release.
- This URL is set by the 'url' metadata property on a release
- or the metadata returned by the update API and should
- be displayed as a link in user interfaces. The URL field
- may not be set for test or nightly releases.
+ description: |-
+ url contains information about this release. This URL is set by
+ the 'url' metadata property on a release or the metadata returned by
+ the update API and should be displayed as a link in user
+ interfaces. The URL field may not be set for test or nightly
+ releases.
type: string
version:
- description: version is a semantic version identifying the
- update version. When this field is part of spec, version
- is optional if image is specified.
+ description: |-
+ version is a semantic version identifying the update version. When this
+ field is part of spec, version is optional if image is specified.
type: string
+ required:
+ - image
+ - version
type: object
risks:
- description: risks represents the range of issues associated
- with updating to the target release. The cluster-version operator
- will evaluate all entries, and only recommend the update if
- there is at least one entry and all entries recommend the
- update.
+ description: |-
+ risks represents the range of issues associated with
+ updating to the target release. The cluster-version
+ operator will evaluate all entries, and only recommend the
+ update if there is at least one entry and all entries
+ recommend the update.
items:
- description: ConditionalUpdateRisk represents a reason and
- cluster-state for not recommending a conditional update.
+ description: |-
+ ConditionalUpdateRisk represents a reason and cluster-state
+ for not recommending a conditional update.
properties:
matchingRules:
- description: matchingRules is a slice of conditions for
- deciding which clusters match the risk and which do
- not. The slice is ordered by decreasing precedence.
- The cluster-version operator will walk the slice in
- order, and stop after the first it can successfully
- evaluate. If no condition can be successfully evaluated,
- the update will not be recommended.
+ description: |-
+ matchingRules is a slice of conditions for deciding which
+ clusters match the risk and which do not. The slice is
+ ordered by decreasing precedence. The cluster-version
+ operator will walk the slice in order, and stop after the
+ first it can successfully evaluate. If no condition can be
+ successfully evaluated, the update will not be recommended.
items:
- description: ClusterCondition is a union of typed cluster
- conditions. The 'type' property determines which
- of the type-specific properties are relevant. When
- evaluated on a cluster, the condition may match, not
- match, or fail to evaluate.
+ description: |-
+ ClusterCondition is a union of typed cluster conditions. The 'type'
+ property determines which of the type-specific properties are relevant.
+ When evaluated on a cluster, the condition may match, not match, or
+ fail to evaluate.
properties:
promql:
description: promQL represents a cluster condition
based on PromQL.
properties:
promql:
- description: PromQL is a PromQL query classifying
- clusters. This query query should return a
- 1 in the match case and a 0 in the does-not-match
- case. Queries which return no time series,
- or which return values besides 0 or 1, are
+ description: |-
+ PromQL is a PromQL query classifying clusters. This query
+ query should return a 1 in the match case and a 0 in the
+ does-not-match case. Queries which return no time
+ series, or which return values besides 0 or 1, are
evaluation failures.
type: string
required:
- promql
type: object
type:
- description: type represents the cluster-condition
- type. This defines the members and semantics of
- any additional properties.
+ description: |-
+ type represents the cluster-condition type. This defines
+ the members and semantics of any additional properties.
enum:
- Always
- PromQL
@@ -562,17 +581,19 @@ spec:
type: array
x-kubernetes-list-type: atomic
message:
- description: message provides additional information about
- the risk of updating, in the event that matchingRules
- match the cluster state. This is only to be consumed
- by humans. It may contain Line Feed characters (U+000A),
- which should be rendered as new lines.
+ description: |-
+ message provides additional information about the risk of
+ updating, in the event that matchingRules match the cluster
+ state. This is only to be consumed by humans. It may
+ contain Line Feed characters (U+000A), which should be
+ rendered as new lines.
minLength: 1
type: string
name:
- description: name is the CamelCase reason for not recommending
- a conditional update, in the event that matchingRules
- match the cluster state.
+ description: |-
+ name is the CamelCase reason for not recommending a
+ conditional update, in the event that matchingRules match the
+ cluster state.
minLength: 1
type: string
url:
@@ -598,16 +619,18 @@ spec:
type: array
x-kubernetes-list-type: atomic
conditions:
- description: conditions provides information about the cluster version.
- The condition "Available" is set to true if the desiredUpdate has
- been reached. The condition "Progressing" is set to true if an update
- is being applied. The condition "Degraded" is set to true if an
- update is currently blocked by a temporary or permanent error. Conditions
- are only valid for the current desiredUpdate when metadata.generation
- is equal to status.generation.
+ description: |-
+ conditions provides information about the cluster version. The condition
+ "Available" is set to true if the desiredUpdate has been reached. The
+ condition "Progressing" is set to true if an update is being applied.
+ The condition "Degraded" is set to true if an update is currently blocked
+ by a temporary or permanent error. Conditions are only valid for the
+ current desiredUpdate when metadata.generation is equal to
+ status.generation.
items:
- description: ClusterOperatorStatusCondition represents the state
- of the operator's managed and monitored components.
+ description: |-
+ ClusterOperatorStatusCondition represents the state of the operator's
+ managed and monitored components.
properties:
lastTransitionTime:
description: lastTransitionTime is the time of the last update
@@ -615,10 +638,10 @@ spec:
format: date-time
type: string
message:
- description: message provides additional information about the
- current condition. This is only to be consumed by humans. It
- may contain Line Feed characters (U+000A), which should be
- rendered as new lines.
+ description: |-
+ message provides additional information about the current condition.
+ This is only to be consumed by humans. It may contain Line Feed
+ characters (U+000A), which should be rendered as new lines.
type: string
reason:
description: reason is the CamelCase reason for the condition's
@@ -640,67 +663,75 @@ spec:
- type
x-kubernetes-list-type: map
desired:
- description: desired is the version that the cluster is reconciling
- towards. If the cluster is not yet fully initialized desired will
- be set with the information available, which may be an image or
- a tag.
+ description: |-
+ desired is the version that the cluster is reconciling towards.
+ If the cluster is not yet fully initialized desired will be set
+ with the information available, which may be an image or a tag.
properties:
channels:
- description: channels is the set of Cincinnati channels to which
- the release currently belongs.
+ description: |-
+ channels is the set of Cincinnati channels to which the release
+ currently belongs.
items:
type: string
type: array
x-kubernetes-list-type: set
image:
- description: image is a container image location that contains
- the update. When this field is part of spec, image is optional
- if version is specified and the availableUpdates field contains
- a matching version.
+ description: |-
+ image is a container image location that contains the update. When this
+ field is part of spec, image is optional if version is specified and the
+ availableUpdates field contains a matching version.
type: string
url:
- description: url contains information about this release. This
- URL is set by the 'url' metadata property on a release or the
- metadata returned by the update API and should be displayed
- as a link in user interfaces. The URL field may not be set for
- test or nightly releases.
+ description: |-
+ url contains information about this release. This URL is set by
+ the 'url' metadata property on a release or the metadata returned by
+ the update API and should be displayed as a link in user
+ interfaces. The URL field may not be set for test or nightly
+ releases.
type: string
version:
- description: version is a semantic version identifying the update
- version. When this field is part of spec, version is optional
- if image is specified.
+ description: |-
+ version is a semantic version identifying the update version. When this
+ field is part of spec, version is optional if image is specified.
type: string
+ required:
+ - image
+ - version
type: object
history:
- description: history contains a list of the most recent versions applied
- to the cluster. This value may be empty during cluster startup,
- and then will be updated when a new update is being applied. The
- newest update is first in the list and it is ordered by recency.
- Updates in the history have state Completed if the rollout completed
- - if an update was failing or halfway applied the state will be
- Partial. Only a limited amount of update history is preserved.
+ description: |-
+ history contains a list of the most recent versions applied to the cluster.
+ This value may be empty during cluster startup, and then will be updated
+ when a new update is being applied. The newest update is first in the
+ list and it is ordered by recency. Updates in the history have state
+ Completed if the rollout completed - if an update was failing or halfway
+ applied the state will be Partial. Only a limited amount of update history
+ is preserved.
items:
description: UpdateHistory is a single attempted update to the cluster.
properties:
acceptedRisks:
- description: acceptedRisks records risks which were accepted
- to initiate the update. For example, it may menition an Upgradeable=False
- or missing signature that was overriden via desiredUpdate.force,
- or an update that was initiated despite not being in the availableUpdates
- set of recommended update targets.
+ description: |-
+ acceptedRisks records risks which were accepted to initiate the update.
+ For example, it may menition an Upgradeable=False or missing signature
+ that was overriden via desiredUpdate.force, or an update that was
+ initiated despite not being in the availableUpdates set of recommended
+ update targets.
type: string
completionTime:
- description: completionTime, if set, is when the update was
- fully applied. The update that is currently being applied
- will have a null completion time. Completion time will always
- be set for entries that are not the current update (usually
- to the started time of the next update).
+ description: |-
+ completionTime, if set, is when the update was fully applied. The update
+ that is currently being applied will have a null completion time.
+ Completion time will always be set for entries that are not the current
+ update (usually to the started time of the next update).
format: date-time
nullable: true
type: string
image:
- description: image is a container image location that contains
- the update. This value is always populated.
+ description: |-
+ image is a container image location that contains the update. This value
+ is always populated.
type: string
startedTime:
description: startedTime is the time at which the update was
@@ -708,24 +739,24 @@ spec:
format: date-time
type: string
state:
- description: state reflects whether the update was fully applied.
- The Partial state indicates the update is not fully applied,
- while the Completed state indicates the update was successfully
- rolled out at least once (all parts of the update successfully
- applied).
+ description: |-
+ state reflects whether the update was fully applied. The Partial state
+ indicates the update is not fully applied, while the Completed state
+ indicates the update was successfully rolled out at least once (all
+ parts of the update successfully applied).
type: string
verified:
- description: verified indicates whether the provided update
- was properly verified before it was installed. If this is
- false the cluster may not be trusted. Verified does not cover
- upgradeable checks that depend on the cluster state at the
- time when the update target was accepted.
+ description: |-
+ verified indicates whether the provided update was properly verified
+ before it was installed. If this is false the cluster may not be trusted.
+ Verified does not cover upgradeable checks that depend on the cluster
+ state at the time when the update target was accepted.
type: boolean
version:
- description: version is a semantic version identifying the update
- version. If the requested image does not define a version,
- or if a failure occurs retrieving the image, this value may
- be empty.
+ description: |-
+ version is a semantic version identifying the update version. If the
+ requested image does not define a version, or if a failure occurs
+ retrieving the image, this value may be empty.
type: string
required:
- completionTime
@@ -737,16 +768,17 @@ spec:
type: array
x-kubernetes-list-type: atomic
observedGeneration:
- description: observedGeneration reports which version of the spec
- is being synced. If this value is not equal to metadata.generation,
- then the desired and conditions fields may represent a previous
- version.
+ description: |-
+ observedGeneration reports which version of the spec is being synced.
+ If this value is not equal to metadata.generation, then the desired
+ and conditions fields may represent a previous version.
format: int64
type: integer
versionHash:
- description: versionHash is a fingerprint of the content that the
- cluster will be updated with. It is used by the operator to avoid
- unnecessary work and is for internal use only.
+ description: |-
+ versionHash is a fingerprint of the content that the cluster will be
+ updated with. It is used by the operator to avoid unnecessary work
+ and is for internal use only.
type: string
required:
- availableUpdates
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_00_cluster-version-operator_01_clusterversions-Default.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_00_cluster-version-operator_01_clusterversions-Default.crd.yaml
index bfc42ee2334d286e2f9ac35325cf3a1066fd6133..92e44d6f7fbc91a85b1add8970e2aaf1cfc4138a 100644
--- a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_00_cluster-version-operator_01_clusterversions-Default.crd.yaml
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_00_cluster-version-operator_01_clusterversions-Default.crd.yaml
@@ -35,36 +35,45 @@ spec:
name: v1
schema:
openAPIV3Schema:
- description: "ClusterVersion is the configuration for the ClusterVersionOperator.
- This is where parameters related to automatic updates can be set. \n Compatibility
- level 1: Stable within a major release for a minimum of 12 months or 3 minor
- releases (whichever is longer)."
+ description: |-
+ ClusterVersion is the configuration for the ClusterVersionOperator. This is where
+ parameters related to automatic updates can be set.
+
+ Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
spec:
- description: spec is the desired state of the cluster version - the operator
- will work to ensure that the desired version is applied to the cluster.
+ description: |-
+ spec is the desired state of the cluster version - the operator will work
+ to ensure that the desired version is applied to the cluster.
properties:
capabilities:
- description: capabilities configures the installation of optional,
- core cluster components. A null value here is identical to an empty
- object; see the child properties for default semantics.
+ description: |-
+ capabilities configures the installation of optional, core
+ cluster components. A null value here is identical to an
+ empty object; see the child properties for default semantics.
properties:
additionalEnabledCapabilities:
- description: additionalEnabledCapabilities extends the set of
- managed capabilities beyond the baseline defined in baselineCapabilitySet. The
- default is an empty set.
+ description: |-
+ additionalEnabledCapabilities extends the set of managed
+ capabilities beyond the baseline defined in
+ baselineCapabilitySet. The default is an empty set.
items:
description: ClusterVersionCapability enumerates optional, core
cluster components.
@@ -85,14 +94,17 @@ spec:
- CloudCredential
- Ingress
- CloudControllerManager
+ - OperatorLifecycleManagerV1
type: string
type: array
x-kubernetes-list-type: atomic
baselineCapabilitySet:
- description: baselineCapabilitySet selects an initial set of optional
- capabilities to enable, which can be extended via additionalEnabledCapabilities. If
- unset, the cluster will choose a default, and the default may
- change over time. The current default is vCurrent.
+ description: |-
+ baselineCapabilitySet selects an initial set of
+ optional capabilities to enable, which can be extended via
+ additionalEnabledCapabilities. If unset, the cluster will
+ choose a default, and the default may change over time.
+ The current default is vCurrent.
enum:
- None
- v4.11
@@ -107,74 +119,76 @@ spec:
type: string
type: object
channel:
- description: channel is an identifier for explicitly requesting that
- a non-default set of updates be applied to this cluster. The default
- channel will be contain stable updates that are appropriate for
- production clusters.
+ description: |-
+ channel is an identifier for explicitly requesting that a non-default
+ set of updates be applied to this cluster. The default channel will be
+ contain stable updates that are appropriate for production clusters.
type: string
clusterID:
- description: clusterID uniquely identifies this cluster. This is expected
- to be an RFC4122 UUID value (xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
- in hexadecimal values). This is a required field.
+ description: |-
+ clusterID uniquely identifies this cluster. This is expected to be
+ an RFC4122 UUID value (xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx in
+ hexadecimal values). This is a required field.
type: string
desiredUpdate:
- description: "desiredUpdate is an optional field that indicates the
- desired value of the cluster version. Setting this value will trigger
- an upgrade (if the current version does not match the desired version).
- The set of recommended update values is listed as part of available
- updates in status, and setting values outside that range may cause
- the upgrade to fail. \n Some of the fields are inter-related with
- restrictions and meanings described here. 1. image is specified,
- version is specified, architecture is specified. API validation
- error. 2. image is specified, version is specified, architecture
- is not specified. You should not do this. version is silently ignored
- and image is used. 3. image is specified, version is not specified,
- architecture is specified. API validation error. 4. image is specified,
- version is not specified, architecture is not specified. image is
- used. 5. image is not specified, version is specified, architecture
- is specified. version and desired architecture are used to select
- an image. 6. image is not specified, version is specified, architecture
- is not specified. version and current architecture are used to select
- an image. 7. image is not specified, version is not specified, architecture
- is specified. API validation error. 8. image is not specified, version
- is not specified, architecture is not specified. API validation
- error. \n If an upgrade fails the operator will halt and report
- status about the failing component. Setting the desired update value
- back to the previous version will cause a rollback to be attempted.
- Not all rollbacks will succeed."
+ description: |-
+ desiredUpdate is an optional field that indicates the desired value of
+ the cluster version. Setting this value will trigger an upgrade (if
+ the current version does not match the desired version). The set of
+ recommended update values is listed as part of available updates in
+ status, and setting values outside that range may cause the upgrade
+ to fail.
+
+ Some of the fields are inter-related with restrictions and meanings described here.
+ 1. image is specified, version is specified, architecture is specified. API validation error.
+ 2. image is specified, version is specified, architecture is not specified. You should not do this. version is silently ignored and image is used.
+ 3. image is specified, version is not specified, architecture is specified. API validation error.
+ 4. image is specified, version is not specified, architecture is not specified. image is used.
+ 5. image is not specified, version is specified, architecture is specified. version and desired architecture are used to select an image.
+ 6. image is not specified, version is specified, architecture is not specified. version and current architecture are used to select an image.
+ 7. image is not specified, version is not specified, architecture is specified. API validation error.
+ 8. image is not specified, version is not specified, architecture is not specified. API validation error.
+
+ If an upgrade fails the operator will halt and report status
+ about the failing component. Setting the desired update value back to
+ the previous version will cause a rollback to be attempted. Not all
+ rollbacks will succeed.
properties:
architecture:
- description: architecture is an optional field that indicates
- the desired value of the cluster architecture. In this context
- cluster architecture means either a single architecture or a
- multi architecture. architecture can only be set to Multi thereby
+ description: |-
+ architecture is an optional field that indicates the desired
+ value of the cluster architecture. In this context cluster
+ architecture means either a single architecture or a multi
+ architecture. architecture can only be set to Multi thereby
only allowing updates from single to multi architecture. If
architecture is set, image cannot be set and version must be
- set. Valid values are 'Multi' and empty.
+ set.
+ Valid values are 'Multi' and empty.
enum:
- Multi
- ""
type: string
force:
- description: force allows an administrator to update to an image
- that has failed verification or upgradeable checks. This option
- should only be used when the authenticity of the provided image
- has been verified out of band because the provided image will
- run with full administrative access to the cluster. Do not use
- this flag with images that comes from unknown or potentially
- malicious sources.
+ description: |-
+ force allows an administrator to update to an image that has failed
+ verification or upgradeable checks. This option should only
+ be used when the authenticity of the provided image has been verified out
+ of band because the provided image will run with full administrative access
+ to the cluster. Do not use this flag with images that comes from unknown
+ or potentially malicious sources.
type: boolean
image:
- description: image is a container image location that contains
- the update. image should be used when the desired version does
- not exist in availableUpdates or history. When image is set,
- version is ignored. When image is set, version should be empty.
+ description: |-
+ image is a container image location that contains the update.
+ image should be used when the desired version does not exist in availableUpdates or history.
+ When image is set, version is ignored. When image is set, version should be empty.
When image is set, architecture cannot be specified.
type: string
version:
- description: version is a semantic version identifying the update
- version. version is ignored if image is specified and required
- if architecture is specified.
+ description: |-
+ version is a semantic version identifying the update version.
+ version is ignored if image is specified and required if
+ architecture is specified.
type: string
type: object
x-kubernetes-validations:
@@ -185,12 +199,14 @@ spec:
rule: 'has(self.architecture) && self.architecture != '''' ? self.version
!= '''' : true'
overrides:
- description: overrides is list of overides for components that are
- managed by cluster version operator. Marking a component unmanaged
- will prevent the operator from creating or updating the object.
+ description: |-
+ overrides is list of overides for components that are managed by
+ cluster version operator. Marking a component unmanaged will prevent
+ the operator from creating or updating the object.
items:
- description: ComponentOverride allows overriding cluster version
- operator's behavior for a component.
+ description: |-
+ ComponentOverride allows overriding cluster version operator's behavior
+ for a component.
properties:
group:
description: group identifies the API group that the kind is
@@ -203,13 +219,15 @@ spec:
description: name is the component's name.
type: string
namespace:
- description: namespace is the component's namespace. If the
- resource is cluster scoped, the namespace should be empty.
+ description: |-
+ namespace is the component's namespace. If the resource is cluster
+ scoped, the namespace should be empty.
type: string
unmanaged:
- description: 'unmanaged controls if cluster version operator
- should stop managing the resources in this cluster. Default:
- false'
+ description: |-
+ unmanaged controls if cluster version operator should stop managing the
+ resources in this cluster.
+ Default: false
type: boolean
required:
- group
@@ -226,52 +244,59 @@ spec:
- name
x-kubernetes-list-type: map
upstream:
- description: upstream may be used to specify the preferred update
- server. By default it will use the appropriate update server for
- the cluster and region.
+ description: |-
+ upstream may be used to specify the preferred update server. By default
+ it will use the appropriate update server for the cluster and region.
type: string
required:
- clusterID
type: object
status:
- description: status contains information about the available updates and
- any in-progress updates.
+ description: |-
+ status contains information about the available updates and any in-progress
+ updates.
properties:
availableUpdates:
- description: availableUpdates contains updates recommended for this
- cluster. Updates which appear in conditionalUpdates but not in availableUpdates
- may expose this cluster to known issues. This list may be empty
- if no updates are recommended, if the update service is unavailable,
- or if an invalid channel has been specified.
+ description: |-
+ availableUpdates contains updates recommended for this
+ cluster. Updates which appear in conditionalUpdates but not in
+ availableUpdates may expose this cluster to known issues. This list
+ may be empty if no updates are recommended, if the update service
+ is unavailable, or if an invalid channel has been specified.
items:
description: Release represents an OpenShift release image and associated
metadata.
properties:
channels:
- description: channels is the set of Cincinnati channels to which
- the release currently belongs.
+ description: |-
+ channels is the set of Cincinnati channels to which the release
+ currently belongs.
items:
type: string
type: array
x-kubernetes-list-type: set
image:
- description: image is a container image location that contains
- the update. When this field is part of spec, image is optional
- if version is specified and the availableUpdates field contains
- a matching version.
+ description: |-
+ image is a container image location that contains the update. When this
+ field is part of spec, image is optional if version is specified and the
+ availableUpdates field contains a matching version.
type: string
url:
- description: url contains information about this release. This
- URL is set by the 'url' metadata property on a release or
- the metadata returned by the update API and should be displayed
- as a link in user interfaces. The URL field may not be set
- for test or nightly releases.
+ description: |-
+ url contains information about this release. This URL is set by
+ the 'url' metadata property on a release or the metadata returned by
+ the update API and should be displayed as a link in user
+ interfaces. The URL field may not be set for test or nightly
+ releases.
type: string
version:
- description: version is a semantic version identifying the update
- version. When this field is part of spec, version is optional
- if image is specified.
+ description: |-
+ version is a semantic version identifying the update version. When this
+ field is part of spec, version is optional if image is specified.
type: string
+ required:
+ - image
+ - version
type: object
nullable: true
type: array
@@ -303,6 +328,7 @@ spec:
- CloudCredential
- Ingress
- CloudControllerManager
+ - OperatorLifecycleManagerV1
type: string
type: array
x-kubernetes-list-type: atomic
@@ -329,69 +355,62 @@ spec:
- CloudCredential
- Ingress
- CloudControllerManager
+ - OperatorLifecycleManagerV1
type: string
type: array
x-kubernetes-list-type: atomic
type: object
conditionalUpdates:
- description: conditionalUpdates contains the list of updates that
- may be recommended for this cluster if it meets specific required
+ description: |-
+ conditionalUpdates contains the list of updates that may be
+ recommended for this cluster if it meets specific required
conditions. Consumers interested in the set of updates that are
- actually recommended for this cluster should use availableUpdates.
- This list may be empty if no updates are recommended, if the update
- service is unavailable, or if an empty or invalid channel has been
- specified.
+ actually recommended for this cluster should use
+ availableUpdates. This list may be empty if no updates are
+ recommended, if the update service is unavailable, or if an empty
+ or invalid channel has been specified.
items:
- description: ConditionalUpdate represents an update which is recommended
- to some clusters on the version the current cluster is reconciling,
- but which may not be recommended for the current cluster.
+ description: |-
+ ConditionalUpdate represents an update which is recommended to some
+ clusters on the version the current cluster is reconciling, but which
+ may not be recommended for the current cluster.
properties:
conditions:
- description: 'conditions represents the observations of the
- conditional update''s current status. Known types are: * Recommended,
- for whether the update is recommended for the current cluster.'
+ description: |-
+ conditions represents the observations of the conditional update's
+ current status. Known types are:
+ * Recommended, for whether the update is recommended for the current cluster.
items:
- description: "Condition contains details for one aspect of
- the current state of this API Resource. --- This struct
- is intended for direct use as an array at the field path
- .status.conditions. For example, \n type FooStatus struct{
- // Represents the observations of a foo's current state.
- // Known .status.conditions.type are: \"Available\", \"Progressing\",
- and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge
- // +listType=map // +listMapKey=type Conditions []metav1.Condition
- `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\"
- protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields
- }"
+ description: Condition contains details for one aspect of
+ the current state of this API Resource.
properties:
lastTransitionTime:
- description: lastTransitionTime is the last time the condition
- transitioned from one status to another. This should
- be when the underlying condition changed. If that is
- not known, then using the time when the API field changed
- is acceptable.
+ description: |-
+ lastTransitionTime is the last time the condition transitioned from one status to another.
+ This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.
format: date-time
type: string
message:
- description: message is a human readable message indicating
- details about the transition. This may be an empty string.
+ description: |-
+ message is a human readable message indicating details about the transition.
+ This may be an empty string.
maxLength: 32768
type: string
observedGeneration:
- description: observedGeneration represents the .metadata.generation
- that the condition was set based upon. For instance,
- if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration
- is 9, the condition is out of date with respect to the
- current state of the instance.
+ description: |-
+ observedGeneration represents the .metadata.generation that the condition was set based upon.
+ For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
+ with respect to the current state of the instance.
format: int64
minimum: 0
type: integer
reason:
- description: reason contains a programmatic identifier
- indicating the reason for the condition's last transition.
- Producers of specific condition types may define expected
- values and meanings for this field, and whether the
- values are considered a guaranteed API. The value should
- be a CamelCase string. This field may not be empty.
+ description: |-
+ reason contains a programmatic identifier indicating the reason for the condition's last transition.
+ Producers of specific condition types may define expected values and meanings for this field,
+ and whether the values are considered a guaranteed API.
+ The value should be a CamelCase string.
+ This field may not be empty.
maxLength: 1024
minLength: 1
pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
@@ -406,11 +425,6 @@ spec:
type: string
type:
description: type of condition in CamelCase or in foo.example.com/CamelCase.
- --- Many .condition.type values are consistent across
- resources like Available, but because arbitrary conditions
- can be useful (see .node.status.conditions), the ability
- to deconflict is important. The regex it matches is
- (dns1123SubdomainFmt/)?(qualifiedNameFmt)
maxLength: 316
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
@@ -429,75 +443,82 @@ spec:
description: release is the target of the update.
properties:
channels:
- description: channels is the set of Cincinnati channels
- to which the release currently belongs.
+ description: |-
+ channels is the set of Cincinnati channels to which the release
+ currently belongs.
items:
type: string
type: array
x-kubernetes-list-type: set
image:
- description: image is a container image location that contains
- the update. When this field is part of spec, image is
- optional if version is specified and the availableUpdates
- field contains a matching version.
+ description: |-
+ image is a container image location that contains the update. When this
+ field is part of spec, image is optional if version is specified and the
+ availableUpdates field contains a matching version.
type: string
url:
- description: url contains information about this release.
- This URL is set by the 'url' metadata property on a release
- or the metadata returned by the update API and should
- be displayed as a link in user interfaces. The URL field
- may not be set for test or nightly releases.
+ description: |-
+ url contains information about this release. This URL is set by
+ the 'url' metadata property on a release or the metadata returned by
+ the update API and should be displayed as a link in user
+ interfaces. The URL field may not be set for test or nightly
+ releases.
type: string
version:
- description: version is a semantic version identifying the
- update version. When this field is part of spec, version
- is optional if image is specified.
+ description: |-
+ version is a semantic version identifying the update version. When this
+ field is part of spec, version is optional if image is specified.
type: string
+ required:
+ - image
+ - version
type: object
risks:
- description: risks represents the range of issues associated
- with updating to the target release. The cluster-version operator
- will evaluate all entries, and only recommend the update if
- there is at least one entry and all entries recommend the
- update.
+ description: |-
+ risks represents the range of issues associated with
+ updating to the target release. The cluster-version
+ operator will evaluate all entries, and only recommend the
+ update if there is at least one entry and all entries
+ recommend the update.
items:
- description: ConditionalUpdateRisk represents a reason and
- cluster-state for not recommending a conditional update.
+ description: |-
+ ConditionalUpdateRisk represents a reason and cluster-state
+ for not recommending a conditional update.
properties:
matchingRules:
- description: matchingRules is a slice of conditions for
- deciding which clusters match the risk and which do
- not. The slice is ordered by decreasing precedence.
- The cluster-version operator will walk the slice in
- order, and stop after the first it can successfully
- evaluate. If no condition can be successfully evaluated,
- the update will not be recommended.
+ description: |-
+ matchingRules is a slice of conditions for deciding which
+ clusters match the risk and which do not. The slice is
+ ordered by decreasing precedence. The cluster-version
+ operator will walk the slice in order, and stop after the
+ first it can successfully evaluate. If no condition can be
+ successfully evaluated, the update will not be recommended.
items:
- description: ClusterCondition is a union of typed cluster
- conditions. The 'type' property determines which
- of the type-specific properties are relevant. When
- evaluated on a cluster, the condition may match, not
- match, or fail to evaluate.
+ description: |-
+ ClusterCondition is a union of typed cluster conditions. The 'type'
+ property determines which of the type-specific properties are relevant.
+ When evaluated on a cluster, the condition may match, not match, or
+ fail to evaluate.
properties:
promql:
description: promQL represents a cluster condition
based on PromQL.
properties:
promql:
- description: PromQL is a PromQL query classifying
- clusters. This query query should return a
- 1 in the match case and a 0 in the does-not-match
- case. Queries which return no time series,
- or which return values besides 0 or 1, are
+ description: |-
+ PromQL is a PromQL query classifying clusters. This query
+ query should return a 1 in the match case and a 0 in the
+ does-not-match case. Queries which return no time
+ series, or which return values besides 0 or 1, are
evaluation failures.
type: string
required:
- promql
type: object
type:
- description: type represents the cluster-condition
- type. This defines the members and semantics of
- any additional properties.
+ description: |-
+ type represents the cluster-condition type. This defines
+ the members and semantics of any additional properties.
enum:
- Always
- PromQL
@@ -509,17 +530,19 @@ spec:
type: array
x-kubernetes-list-type: atomic
message:
- description: message provides additional information about
- the risk of updating, in the event that matchingRules
- match the cluster state. This is only to be consumed
- by humans. It may contain Line Feed characters (U+000A),
- which should be rendered as new lines.
+ description: |-
+ message provides additional information about the risk of
+ updating, in the event that matchingRules match the cluster
+ state. This is only to be consumed by humans. It may
+ contain Line Feed characters (U+000A), which should be
+ rendered as new lines.
minLength: 1
type: string
name:
- description: name is the CamelCase reason for not recommending
- a conditional update, in the event that matchingRules
- match the cluster state.
+ description: |-
+ name is the CamelCase reason for not recommending a
+ conditional update, in the event that matchingRules match the
+ cluster state.
minLength: 1
type: string
url:
@@ -545,16 +568,18 @@ spec:
type: array
x-kubernetes-list-type: atomic
conditions:
- description: conditions provides information about the cluster version.
- The condition "Available" is set to true if the desiredUpdate has
- been reached. The condition "Progressing" is set to true if an update
- is being applied. The condition "Degraded" is set to true if an
- update is currently blocked by a temporary or permanent error. Conditions
- are only valid for the current desiredUpdate when metadata.generation
- is equal to status.generation.
+ description: |-
+ conditions provides information about the cluster version. The condition
+ "Available" is set to true if the desiredUpdate has been reached. The
+ condition "Progressing" is set to true if an update is being applied.
+ The condition "Degraded" is set to true if an update is currently blocked
+ by a temporary or permanent error. Conditions are only valid for the
+ current desiredUpdate when metadata.generation is equal to
+ status.generation.
items:
- description: ClusterOperatorStatusCondition represents the state
- of the operator's managed and monitored components.
+ description: |-
+ ClusterOperatorStatusCondition represents the state of the operator's
+ managed and monitored components.
properties:
lastTransitionTime:
description: lastTransitionTime is the time of the last update
@@ -562,10 +587,10 @@ spec:
format: date-time
type: string
message:
- description: message provides additional information about the
- current condition. This is only to be consumed by humans. It
- may contain Line Feed characters (U+000A), which should be
- rendered as new lines.
+ description: |-
+ message provides additional information about the current condition.
+ This is only to be consumed by humans. It may contain Line Feed
+ characters (U+000A), which should be rendered as new lines.
type: string
reason:
description: reason is the CamelCase reason for the condition's
@@ -587,67 +612,75 @@ spec:
- type
x-kubernetes-list-type: map
desired:
- description: desired is the version that the cluster is reconciling
- towards. If the cluster is not yet fully initialized desired will
- be set with the information available, which may be an image or
- a tag.
+ description: |-
+ desired is the version that the cluster is reconciling towards.
+ If the cluster is not yet fully initialized desired will be set
+ with the information available, which may be an image or a tag.
properties:
channels:
- description: channels is the set of Cincinnati channels to which
- the release currently belongs.
+ description: |-
+ channels is the set of Cincinnati channels to which the release
+ currently belongs.
items:
type: string
type: array
x-kubernetes-list-type: set
image:
- description: image is a container image location that contains
- the update. When this field is part of spec, image is optional
- if version is specified and the availableUpdates field contains
- a matching version.
+ description: |-
+ image is a container image location that contains the update. When this
+ field is part of spec, image is optional if version is specified and the
+ availableUpdates field contains a matching version.
type: string
url:
- description: url contains information about this release. This
- URL is set by the 'url' metadata property on a release or the
- metadata returned by the update API and should be displayed
- as a link in user interfaces. The URL field may not be set for
- test or nightly releases.
+ description: |-
+ url contains information about this release. This URL is set by
+ the 'url' metadata property on a release or the metadata returned by
+ the update API and should be displayed as a link in user
+ interfaces. The URL field may not be set for test or nightly
+ releases.
type: string
version:
- description: version is a semantic version identifying the update
- version. When this field is part of spec, version is optional
- if image is specified.
+ description: |-
+ version is a semantic version identifying the update version. When this
+ field is part of spec, version is optional if image is specified.
type: string
+ required:
+ - image
+ - version
type: object
history:
- description: history contains a list of the most recent versions applied
- to the cluster. This value may be empty during cluster startup,
- and then will be updated when a new update is being applied. The
- newest update is first in the list and it is ordered by recency.
- Updates in the history have state Completed if the rollout completed
- - if an update was failing or halfway applied the state will be
- Partial. Only a limited amount of update history is preserved.
+ description: |-
+ history contains a list of the most recent versions applied to the cluster.
+ This value may be empty during cluster startup, and then will be updated
+ when a new update is being applied. The newest update is first in the
+ list and it is ordered by recency. Updates in the history have state
+ Completed if the rollout completed - if an update was failing or halfway
+ applied the state will be Partial. Only a limited amount of update history
+ is preserved.
items:
description: UpdateHistory is a single attempted update to the cluster.
properties:
acceptedRisks:
- description: acceptedRisks records risks which were accepted
- to initiate the update. For example, it may menition an Upgradeable=False
- or missing signature that was overriden via desiredUpdate.force,
- or an update that was initiated despite not being in the availableUpdates
- set of recommended update targets.
+ description: |-
+ acceptedRisks records risks which were accepted to initiate the update.
+ For example, it may menition an Upgradeable=False or missing signature
+ that was overriden via desiredUpdate.force, or an update that was
+ initiated despite not being in the availableUpdates set of recommended
+ update targets.
type: string
completionTime:
- description: completionTime, if set, is when the update was
- fully applied. The update that is currently being applied
- will have a null completion time. Completion time will always
- be set for entries that are not the current update (usually
- to the started time of the next update).
+ description: |-
+ completionTime, if set, is when the update was fully applied. The update
+ that is currently being applied will have a null completion time.
+ Completion time will always be set for entries that are not the current
+ update (usually to the started time of the next update).
format: date-time
nullable: true
type: string
image:
- description: image is a container image location that contains
- the update. This value is always populated.
+ description: |-
+ image is a container image location that contains the update. This value
+ is always populated.
type: string
startedTime:
description: startedTime is the time at which the update was
@@ -655,24 +688,24 @@ spec:
format: date-time
type: string
state:
- description: state reflects whether the update was fully applied.
- The Partial state indicates the update is not fully applied,
- while the Completed state indicates the update was successfully
- rolled out at least once (all parts of the update successfully
- applied).
+ description: |-
+ state reflects whether the update was fully applied. The Partial state
+ indicates the update is not fully applied, while the Completed state
+ indicates the update was successfully rolled out at least once (all
+ parts of the update successfully applied).
type: string
verified:
- description: verified indicates whether the provided update
- was properly verified before it was installed. If this is
- false the cluster may not be trusted. Verified does not cover
- upgradeable checks that depend on the cluster state at the
- time when the update target was accepted.
+ description: |-
+ verified indicates whether the provided update was properly verified
+ before it was installed. If this is false the cluster may not be trusted.
+ Verified does not cover upgradeable checks that depend on the cluster
+ state at the time when the update target was accepted.
type: boolean
version:
- description: version is a semantic version identifying the update
- version. If the requested image does not define a version,
- or if a failure occurs retrieving the image, this value may
- be empty.
+ description: |-
+ version is a semantic version identifying the update version. If the
+ requested image does not define a version, or if a failure occurs
+ retrieving the image, this value may be empty.
type: string
required:
- completionTime
@@ -684,16 +717,17 @@ spec:
type: array
x-kubernetes-list-type: atomic
observedGeneration:
- description: observedGeneration reports which version of the spec
- is being synced. If this value is not equal to metadata.generation,
- then the desired and conditions fields may represent a previous
- version.
+ description: |-
+ observedGeneration reports which version of the spec is being synced.
+ If this value is not equal to metadata.generation, then the desired
+ and conditions fields may represent a previous version.
format: int64
type: integer
versionHash:
- description: versionHash is a fingerprint of the content that the
- cluster will be updated with. It is used by the operator to avoid
- unnecessary work and is for internal use only.
+ description: |-
+ versionHash is a fingerprint of the content that the cluster will be
+ updated with. It is used by the operator to avoid unnecessary work
+ and is for internal use only.
type: string
required:
- availableUpdates
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_00_cluster-version-operator_01_clusterversions-DevPreviewNoUpgrade.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_00_cluster-version-operator_01_clusterversions-DevPreviewNoUpgrade.crd.yaml
index c6b84be678c3faa6e5b4db142c47eea306041791..a323e456b93031eff7d99b97c6f2f72ccf3129ce 100644
--- a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_00_cluster-version-operator_01_clusterversions-DevPreviewNoUpgrade.crd.yaml
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_00_cluster-version-operator_01_clusterversions-DevPreviewNoUpgrade.crd.yaml
@@ -35,36 +35,45 @@ spec:
name: v1
schema:
openAPIV3Schema:
- description: "ClusterVersion is the configuration for the ClusterVersionOperator.
- This is where parameters related to automatic updates can be set. \n Compatibility
- level 1: Stable within a major release for a minimum of 12 months or 3 minor
- releases (whichever is longer)."
+ description: |-
+ ClusterVersion is the configuration for the ClusterVersionOperator. This is where
+ parameters related to automatic updates can be set.
+
+ Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
spec:
- description: spec is the desired state of the cluster version - the operator
- will work to ensure that the desired version is applied to the cluster.
+ description: |-
+ spec is the desired state of the cluster version - the operator will work
+ to ensure that the desired version is applied to the cluster.
properties:
capabilities:
- description: capabilities configures the installation of optional,
- core cluster components. A null value here is identical to an empty
- object; see the child properties for default semantics.
+ description: |-
+ capabilities configures the installation of optional, core
+ cluster components. A null value here is identical to an
+ empty object; see the child properties for default semantics.
properties:
additionalEnabledCapabilities:
- description: additionalEnabledCapabilities extends the set of
- managed capabilities beyond the baseline defined in baselineCapabilitySet. The
- default is an empty set.
+ description: |-
+ additionalEnabledCapabilities extends the set of managed
+ capabilities beyond the baseline defined in
+ baselineCapabilitySet. The default is an empty set.
items:
description: ClusterVersionCapability enumerates optional, core
cluster components.
@@ -85,14 +94,17 @@ spec:
- CloudCredential
- Ingress
- CloudControllerManager
+ - OperatorLifecycleManagerV1
type: string
type: array
x-kubernetes-list-type: atomic
baselineCapabilitySet:
- description: baselineCapabilitySet selects an initial set of optional
- capabilities to enable, which can be extended via additionalEnabledCapabilities. If
- unset, the cluster will choose a default, and the default may
- change over time. The current default is vCurrent.
+ description: |-
+ baselineCapabilitySet selects an initial set of
+ optional capabilities to enable, which can be extended via
+ additionalEnabledCapabilities. If unset, the cluster will
+ choose a default, and the default may change over time.
+ The current default is vCurrent.
enum:
- None
- v4.11
@@ -107,74 +119,76 @@ spec:
type: string
type: object
channel:
- description: channel is an identifier for explicitly requesting that
- a non-default set of updates be applied to this cluster. The default
- channel will be contain stable updates that are appropriate for
- production clusters.
+ description: |-
+ channel is an identifier for explicitly requesting that a non-default
+ set of updates be applied to this cluster. The default channel will be
+ contain stable updates that are appropriate for production clusters.
type: string
clusterID:
- description: clusterID uniquely identifies this cluster. This is expected
- to be an RFC4122 UUID value (xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
- in hexadecimal values). This is a required field.
+ description: |-
+ clusterID uniquely identifies this cluster. This is expected to be
+ an RFC4122 UUID value (xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx in
+ hexadecimal values). This is a required field.
type: string
desiredUpdate:
- description: "desiredUpdate is an optional field that indicates the
- desired value of the cluster version. Setting this value will trigger
- an upgrade (if the current version does not match the desired version).
- The set of recommended update values is listed as part of available
- updates in status, and setting values outside that range may cause
- the upgrade to fail. \n Some of the fields are inter-related with
- restrictions and meanings described here. 1. image is specified,
- version is specified, architecture is specified. API validation
- error. 2. image is specified, version is specified, architecture
- is not specified. You should not do this. version is silently ignored
- and image is used. 3. image is specified, version is not specified,
- architecture is specified. API validation error. 4. image is specified,
- version is not specified, architecture is not specified. image is
- used. 5. image is not specified, version is specified, architecture
- is specified. version and desired architecture are used to select
- an image. 6. image is not specified, version is specified, architecture
- is not specified. version and current architecture are used to select
- an image. 7. image is not specified, version is not specified, architecture
- is specified. API validation error. 8. image is not specified, version
- is not specified, architecture is not specified. API validation
- error. \n If an upgrade fails the operator will halt and report
- status about the failing component. Setting the desired update value
- back to the previous version will cause a rollback to be attempted.
- Not all rollbacks will succeed."
+ description: |-
+ desiredUpdate is an optional field that indicates the desired value of
+ the cluster version. Setting this value will trigger an upgrade (if
+ the current version does not match the desired version). The set of
+ recommended update values is listed as part of available updates in
+ status, and setting values outside that range may cause the upgrade
+ to fail.
+
+ Some of the fields are inter-related with restrictions and meanings described here.
+ 1. image is specified, version is specified, architecture is specified. API validation error.
+ 2. image is specified, version is specified, architecture is not specified. You should not do this. version is silently ignored and image is used.
+ 3. image is specified, version is not specified, architecture is specified. API validation error.
+ 4. image is specified, version is not specified, architecture is not specified. image is used.
+ 5. image is not specified, version is specified, architecture is specified. version and desired architecture are used to select an image.
+ 6. image is not specified, version is specified, architecture is not specified. version and current architecture are used to select an image.
+ 7. image is not specified, version is not specified, architecture is specified. API validation error.
+ 8. image is not specified, version is not specified, architecture is not specified. API validation error.
+
+ If an upgrade fails the operator will halt and report status
+ about the failing component. Setting the desired update value back to
+ the previous version will cause a rollback to be attempted. Not all
+ rollbacks will succeed.
properties:
architecture:
- description: architecture is an optional field that indicates
- the desired value of the cluster architecture. In this context
- cluster architecture means either a single architecture or a
- multi architecture. architecture can only be set to Multi thereby
+ description: |-
+ architecture is an optional field that indicates the desired
+ value of the cluster architecture. In this context cluster
+ architecture means either a single architecture or a multi
+ architecture. architecture can only be set to Multi thereby
only allowing updates from single to multi architecture. If
architecture is set, image cannot be set and version must be
- set. Valid values are 'Multi' and empty.
+ set.
+ Valid values are 'Multi' and empty.
enum:
- Multi
- ""
type: string
force:
- description: force allows an administrator to update to an image
- that has failed verification or upgradeable checks. This option
- should only be used when the authenticity of the provided image
- has been verified out of band because the provided image will
- run with full administrative access to the cluster. Do not use
- this flag with images that comes from unknown or potentially
- malicious sources.
+ description: |-
+ force allows an administrator to update to an image that has failed
+ verification or upgradeable checks. This option should only
+ be used when the authenticity of the provided image has been verified out
+ of band because the provided image will run with full administrative access
+ to the cluster. Do not use this flag with images that comes from unknown
+ or potentially malicious sources.
type: boolean
image:
- description: image is a container image location that contains
- the update. image should be used when the desired version does
- not exist in availableUpdates or history. When image is set,
- version is ignored. When image is set, version should be empty.
+ description: |-
+ image is a container image location that contains the update.
+ image should be used when the desired version does not exist in availableUpdates or history.
+ When image is set, version is ignored. When image is set, version should be empty.
When image is set, architecture cannot be specified.
type: string
version:
- description: version is a semantic version identifying the update
- version. version is ignored if image is specified and required
- if architecture is specified.
+ description: |-
+ version is a semantic version identifying the update version.
+ version is ignored if image is specified and required if
+ architecture is specified.
type: string
type: object
x-kubernetes-validations:
@@ -185,12 +199,14 @@ spec:
rule: 'has(self.architecture) && self.architecture != '''' ? self.version
!= '''' : true'
overrides:
- description: overrides is list of overides for components that are
- managed by cluster version operator. Marking a component unmanaged
- will prevent the operator from creating or updating the object.
+ description: |-
+ overrides is list of overides for components that are managed by
+ cluster version operator. Marking a component unmanaged will prevent
+ the operator from creating or updating the object.
items:
- description: ComponentOverride allows overriding cluster version
- operator's behavior for a component.
+ description: |-
+ ComponentOverride allows overriding cluster version operator's behavior
+ for a component.
properties:
group:
description: group identifies the API group that the kind is
@@ -203,13 +219,15 @@ spec:
description: name is the component's name.
type: string
namespace:
- description: namespace is the component's namespace. If the
- resource is cluster scoped, the namespace should be empty.
+ description: |-
+ namespace is the component's namespace. If the resource is cluster
+ scoped, the namespace should be empty.
type: string
unmanaged:
- description: 'unmanaged controls if cluster version operator
- should stop managing the resources in this cluster. Default:
- false'
+ description: |-
+ unmanaged controls if cluster version operator should stop managing the
+ resources in this cluster.
+ Default: false
type: boolean
required:
- group
@@ -226,33 +244,31 @@ spec:
- name
x-kubernetes-list-type: map
signatureStores:
- description: "signatureStores contains the upstream URIs to verify
- release signatures and optional reference to a config map by name
- containing the PEM-encoded CA bundle. \n By default, CVO will use
- existing signature stores if this property is empty. The CVO will
- check the release signatures in the local ConfigMaps first. It will
- search for a valid signature in these stores in parallel only when
- local ConfigMaps did not include a valid signature. Validation will
- fail if none of the signature stores reply with valid signature
- before timeout. Setting signatureStores will replace the default
- signature stores with custom signature stores. Default stores can
- be used with custom signature stores by adding them manually. \n
- A maximum of 32 signature stores may be configured."
+ description: |-
+ signatureStores contains the upstream URIs to verify release signatures and optional
+ reference to a config map by name containing the PEM-encoded CA bundle.
+
+ By default, CVO will use existing signature stores if this property is empty.
+ The CVO will check the release signatures in the local ConfigMaps first. It will search for a valid signature
+ in these stores in parallel only when local ConfigMaps did not include a valid signature.
+ Validation will fail if none of the signature stores reply with valid signature before timeout.
+ Setting signatureStores will replace the default signature stores with custom signature stores.
+ Default stores can be used with custom signature stores by adding them manually.
+
+ A maximum of 32 signature stores may be configured.
items:
description: SignatureStore represents the URL of custom Signature
Store
properties:
ca:
- description: ca is an optional reference to a config map by
- name containing the PEM-encoded CA bundle. It is used as a
- trust anchor to validate the TLS certificate presented by
- the remote server. The key "ca.crt" is used to locate the
- data. If specified and the config map or expected key is not
- found, the signature store is not honored. If the specified
- ca data is not valid, the signature store is not honored.
- If empty, we fall back to the CA configured via Proxy, which
- is appended to the default system roots. The namespace for
- this config map is openshift-config.
+ description: |-
+ ca is an optional reference to a config map by name containing the PEM-encoded CA bundle.
+ It is used as a trust anchor to validate the TLS certificate presented by the remote server.
+ The key "ca.crt" is used to locate the data.
+ If specified and the config map or expected key is not found, the signature store is not honored.
+ If the specified ca data is not valid, the signature store is not honored.
+ If empty, we fall back to the CA configured via Proxy, which is appended to the default system roots.
+ The namespace for this config map is openshift-config.
properties:
name:
description: name is the metadata.name of the referenced
@@ -262,10 +278,10 @@ spec:
- name
type: object
url:
- description: url contains the upstream custom signature store
- URL. url should be a valid absolute http/https URI of an upstream
- signature store as per rfc1738. This must be provided and
- cannot be empty.
+ description: |-
+ url contains the upstream custom signature store URL.
+ url should be a valid absolute http/https URI of an upstream signature store as per rfc1738.
+ This must be provided and cannot be empty.
type: string
x-kubernetes-validations:
- message: url must be a valid absolute URL
@@ -279,52 +295,59 @@ spec:
- url
x-kubernetes-list-type: map
upstream:
- description: upstream may be used to specify the preferred update
- server. By default it will use the appropriate update server for
- the cluster and region.
+ description: |-
+ upstream may be used to specify the preferred update server. By default
+ it will use the appropriate update server for the cluster and region.
type: string
required:
- clusterID
type: object
status:
- description: status contains information about the available updates and
- any in-progress updates.
+ description: |-
+ status contains information about the available updates and any in-progress
+ updates.
properties:
availableUpdates:
- description: availableUpdates contains updates recommended for this
- cluster. Updates which appear in conditionalUpdates but not in availableUpdates
- may expose this cluster to known issues. This list may be empty
- if no updates are recommended, if the update service is unavailable,
- or if an invalid channel has been specified.
+ description: |-
+ availableUpdates contains updates recommended for this
+ cluster. Updates which appear in conditionalUpdates but not in
+ availableUpdates may expose this cluster to known issues. This list
+ may be empty if no updates are recommended, if the update service
+ is unavailable, or if an invalid channel has been specified.
items:
description: Release represents an OpenShift release image and associated
metadata.
properties:
channels:
- description: channels is the set of Cincinnati channels to which
- the release currently belongs.
+ description: |-
+ channels is the set of Cincinnati channels to which the release
+ currently belongs.
items:
type: string
type: array
x-kubernetes-list-type: set
image:
- description: image is a container image location that contains
- the update. When this field is part of spec, image is optional
- if version is specified and the availableUpdates field contains
- a matching version.
+ description: |-
+ image is a container image location that contains the update. When this
+ field is part of spec, image is optional if version is specified and the
+ availableUpdates field contains a matching version.
type: string
url:
- description: url contains information about this release. This
- URL is set by the 'url' metadata property on a release or
- the metadata returned by the update API and should be displayed
- as a link in user interfaces. The URL field may not be set
- for test or nightly releases.
+ description: |-
+ url contains information about this release. This URL is set by
+ the 'url' metadata property on a release or the metadata returned by
+ the update API and should be displayed as a link in user
+ interfaces. The URL field may not be set for test or nightly
+ releases.
type: string
version:
- description: version is a semantic version identifying the update
- version. When this field is part of spec, version is optional
- if image is specified.
+ description: |-
+ version is a semantic version identifying the update version. When this
+ field is part of spec, version is optional if image is specified.
type: string
+ required:
+ - image
+ - version
type: object
nullable: true
type: array
@@ -356,6 +379,7 @@ spec:
- CloudCredential
- Ingress
- CloudControllerManager
+ - OperatorLifecycleManagerV1
type: string
type: array
x-kubernetes-list-type: atomic
@@ -382,69 +406,62 @@ spec:
- CloudCredential
- Ingress
- CloudControllerManager
+ - OperatorLifecycleManagerV1
type: string
type: array
x-kubernetes-list-type: atomic
type: object
conditionalUpdates:
- description: conditionalUpdates contains the list of updates that
- may be recommended for this cluster if it meets specific required
+ description: |-
+ conditionalUpdates contains the list of updates that may be
+ recommended for this cluster if it meets specific required
conditions. Consumers interested in the set of updates that are
- actually recommended for this cluster should use availableUpdates.
- This list may be empty if no updates are recommended, if the update
- service is unavailable, or if an empty or invalid channel has been
- specified.
+ actually recommended for this cluster should use
+ availableUpdates. This list may be empty if no updates are
+ recommended, if the update service is unavailable, or if an empty
+ or invalid channel has been specified.
items:
- description: ConditionalUpdate represents an update which is recommended
- to some clusters on the version the current cluster is reconciling,
- but which may not be recommended for the current cluster.
+ description: |-
+ ConditionalUpdate represents an update which is recommended to some
+ clusters on the version the current cluster is reconciling, but which
+ may not be recommended for the current cluster.
properties:
conditions:
- description: 'conditions represents the observations of the
- conditional update''s current status. Known types are: * Recommended,
- for whether the update is recommended for the current cluster.'
+ description: |-
+ conditions represents the observations of the conditional update's
+ current status. Known types are:
+ * Recommended, for whether the update is recommended for the current cluster.
items:
- description: "Condition contains details for one aspect of
- the current state of this API Resource. --- This struct
- is intended for direct use as an array at the field path
- .status.conditions. For example, \n type FooStatus struct{
- // Represents the observations of a foo's current state.
- // Known .status.conditions.type are: \"Available\", \"Progressing\",
- and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge
- // +listType=map // +listMapKey=type Conditions []metav1.Condition
- `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\"
- protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields
- }"
+ description: Condition contains details for one aspect of
+ the current state of this API Resource.
properties:
lastTransitionTime:
- description: lastTransitionTime is the last time the condition
- transitioned from one status to another. This should
- be when the underlying condition changed. If that is
- not known, then using the time when the API field changed
- is acceptable.
+ description: |-
+ lastTransitionTime is the last time the condition transitioned from one status to another.
+ This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.
format: date-time
type: string
message:
- description: message is a human readable message indicating
- details about the transition. This may be an empty string.
+ description: |-
+ message is a human readable message indicating details about the transition.
+ This may be an empty string.
maxLength: 32768
type: string
observedGeneration:
- description: observedGeneration represents the .metadata.generation
- that the condition was set based upon. For instance,
- if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration
- is 9, the condition is out of date with respect to the
- current state of the instance.
+ description: |-
+ observedGeneration represents the .metadata.generation that the condition was set based upon.
+ For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
+ with respect to the current state of the instance.
format: int64
minimum: 0
type: integer
reason:
- description: reason contains a programmatic identifier
- indicating the reason for the condition's last transition.
- Producers of specific condition types may define expected
- values and meanings for this field, and whether the
- values are considered a guaranteed API. The value should
- be a CamelCase string. This field may not be empty.
+ description: |-
+ reason contains a programmatic identifier indicating the reason for the condition's last transition.
+ Producers of specific condition types may define expected values and meanings for this field,
+ and whether the values are considered a guaranteed API.
+ The value should be a CamelCase string.
+ This field may not be empty.
maxLength: 1024
minLength: 1
pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
@@ -459,11 +476,6 @@ spec:
type: string
type:
description: type of condition in CamelCase or in foo.example.com/CamelCase.
- --- Many .condition.type values are consistent across
- resources like Available, but because arbitrary conditions
- can be useful (see .node.status.conditions), the ability
- to deconflict is important. The regex it matches is
- (dns1123SubdomainFmt/)?(qualifiedNameFmt)
maxLength: 316
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
@@ -482,75 +494,82 @@ spec:
description: release is the target of the update.
properties:
channels:
- description: channels is the set of Cincinnati channels
- to which the release currently belongs.
+ description: |-
+ channels is the set of Cincinnati channels to which the release
+ currently belongs.
items:
type: string
type: array
x-kubernetes-list-type: set
image:
- description: image is a container image location that contains
- the update. When this field is part of spec, image is
- optional if version is specified and the availableUpdates
- field contains a matching version.
+ description: |-
+ image is a container image location that contains the update. When this
+ field is part of spec, image is optional if version is specified and the
+ availableUpdates field contains a matching version.
type: string
url:
- description: url contains information about this release.
- This URL is set by the 'url' metadata property on a release
- or the metadata returned by the update API and should
- be displayed as a link in user interfaces. The URL field
- may not be set for test or nightly releases.
+ description: |-
+ url contains information about this release. This URL is set by
+ the 'url' metadata property on a release or the metadata returned by
+ the update API and should be displayed as a link in user
+ interfaces. The URL field may not be set for test or nightly
+ releases.
type: string
version:
- description: version is a semantic version identifying the
- update version. When this field is part of spec, version
- is optional if image is specified.
+ description: |-
+ version is a semantic version identifying the update version. When this
+ field is part of spec, version is optional if image is specified.
type: string
+ required:
+ - image
+ - version
type: object
risks:
- description: risks represents the range of issues associated
- with updating to the target release. The cluster-version operator
- will evaluate all entries, and only recommend the update if
- there is at least one entry and all entries recommend the
- update.
+ description: |-
+ risks represents the range of issues associated with
+ updating to the target release. The cluster-version
+ operator will evaluate all entries, and only recommend the
+ update if there is at least one entry and all entries
+ recommend the update.
items:
- description: ConditionalUpdateRisk represents a reason and
- cluster-state for not recommending a conditional update.
+ description: |-
+ ConditionalUpdateRisk represents a reason and cluster-state
+ for not recommending a conditional update.
properties:
matchingRules:
- description: matchingRules is a slice of conditions for
- deciding which clusters match the risk and which do
- not. The slice is ordered by decreasing precedence.
- The cluster-version operator will walk the slice in
- order, and stop after the first it can successfully
- evaluate. If no condition can be successfully evaluated,
- the update will not be recommended.
+ description: |-
+ matchingRules is a slice of conditions for deciding which
+ clusters match the risk and which do not. The slice is
+ ordered by decreasing precedence. The cluster-version
+ operator will walk the slice in order, and stop after the
+ first it can successfully evaluate. If no condition can be
+ successfully evaluated, the update will not be recommended.
items:
- description: ClusterCondition is a union of typed cluster
- conditions. The 'type' property determines which
- of the type-specific properties are relevant. When
- evaluated on a cluster, the condition may match, not
- match, or fail to evaluate.
+ description: |-
+ ClusterCondition is a union of typed cluster conditions. The 'type'
+ property determines which of the type-specific properties are relevant.
+ When evaluated on a cluster, the condition may match, not match, or
+ fail to evaluate.
properties:
promql:
description: promQL represents a cluster condition
based on PromQL.
properties:
promql:
- description: PromQL is a PromQL query classifying
- clusters. This query query should return a
- 1 in the match case and a 0 in the does-not-match
- case. Queries which return no time series,
- or which return values besides 0 or 1, are
+ description: |-
+ PromQL is a PromQL query classifying clusters. This query
+ query should return a 1 in the match case and a 0 in the
+ does-not-match case. Queries which return no time
+ series, or which return values besides 0 or 1, are
evaluation failures.
type: string
required:
- promql
type: object
type:
- description: type represents the cluster-condition
- type. This defines the members and semantics of
- any additional properties.
+ description: |-
+ type represents the cluster-condition type. This defines
+ the members and semantics of any additional properties.
enum:
- Always
- PromQL
@@ -562,17 +581,19 @@ spec:
type: array
x-kubernetes-list-type: atomic
message:
- description: message provides additional information about
- the risk of updating, in the event that matchingRules
- match the cluster state. This is only to be consumed
- by humans. It may contain Line Feed characters (U+000A),
- which should be rendered as new lines.
+ description: |-
+ message provides additional information about the risk of
+ updating, in the event that matchingRules match the cluster
+ state. This is only to be consumed by humans. It may
+ contain Line Feed characters (U+000A), which should be
+ rendered as new lines.
minLength: 1
type: string
name:
- description: name is the CamelCase reason for not recommending
- a conditional update, in the event that matchingRules
- match the cluster state.
+ description: |-
+ name is the CamelCase reason for not recommending a
+ conditional update, in the event that matchingRules match the
+ cluster state.
minLength: 1
type: string
url:
@@ -598,16 +619,18 @@ spec:
type: array
x-kubernetes-list-type: atomic
conditions:
- description: conditions provides information about the cluster version.
- The condition "Available" is set to true if the desiredUpdate has
- been reached. The condition "Progressing" is set to true if an update
- is being applied. The condition "Degraded" is set to true if an
- update is currently blocked by a temporary or permanent error. Conditions
- are only valid for the current desiredUpdate when metadata.generation
- is equal to status.generation.
+ description: |-
+ conditions provides information about the cluster version. The condition
+ "Available" is set to true if the desiredUpdate has been reached. The
+ condition "Progressing" is set to true if an update is being applied.
+ The condition "Degraded" is set to true if an update is currently blocked
+ by a temporary or permanent error. Conditions are only valid for the
+ current desiredUpdate when metadata.generation is equal to
+ status.generation.
items:
- description: ClusterOperatorStatusCondition represents the state
- of the operator's managed and monitored components.
+ description: |-
+ ClusterOperatorStatusCondition represents the state of the operator's
+ managed and monitored components.
properties:
lastTransitionTime:
description: lastTransitionTime is the time of the last update
@@ -615,10 +638,10 @@ spec:
format: date-time
type: string
message:
- description: message provides additional information about the
- current condition. This is only to be consumed by humans. It
- may contain Line Feed characters (U+000A), which should be
- rendered as new lines.
+ description: |-
+ message provides additional information about the current condition.
+ This is only to be consumed by humans. It may contain Line Feed
+ characters (U+000A), which should be rendered as new lines.
type: string
reason:
description: reason is the CamelCase reason for the condition's
@@ -640,67 +663,75 @@ spec:
- type
x-kubernetes-list-type: map
desired:
- description: desired is the version that the cluster is reconciling
- towards. If the cluster is not yet fully initialized desired will
- be set with the information available, which may be an image or
- a tag.
+ description: |-
+ desired is the version that the cluster is reconciling towards.
+ If the cluster is not yet fully initialized desired will be set
+ with the information available, which may be an image or a tag.
properties:
channels:
- description: channels is the set of Cincinnati channels to which
- the release currently belongs.
+ description: |-
+ channels is the set of Cincinnati channels to which the release
+ currently belongs.
items:
type: string
type: array
x-kubernetes-list-type: set
image:
- description: image is a container image location that contains
- the update. When this field is part of spec, image is optional
- if version is specified and the availableUpdates field contains
- a matching version.
+ description: |-
+ image is a container image location that contains the update. When this
+ field is part of spec, image is optional if version is specified and the
+ availableUpdates field contains a matching version.
type: string
url:
- description: url contains information about this release. This
- URL is set by the 'url' metadata property on a release or the
- metadata returned by the update API and should be displayed
- as a link in user interfaces. The URL field may not be set for
- test or nightly releases.
+ description: |-
+ url contains information about this release. This URL is set by
+ the 'url' metadata property on a release or the metadata returned by
+ the update API and should be displayed as a link in user
+ interfaces. The URL field may not be set for test or nightly
+ releases.
type: string
version:
- description: version is a semantic version identifying the update
- version. When this field is part of spec, version is optional
- if image is specified.
+ description: |-
+ version is a semantic version identifying the update version. When this
+ field is part of spec, version is optional if image is specified.
type: string
+ required:
+ - image
+ - version
type: object
history:
- description: history contains a list of the most recent versions applied
- to the cluster. This value may be empty during cluster startup,
- and then will be updated when a new update is being applied. The
- newest update is first in the list and it is ordered by recency.
- Updates in the history have state Completed if the rollout completed
- - if an update was failing or halfway applied the state will be
- Partial. Only a limited amount of update history is preserved.
+ description: |-
+ history contains a list of the most recent versions applied to the cluster.
+ This value may be empty during cluster startup, and then will be updated
+ when a new update is being applied. The newest update is first in the
+ list and it is ordered by recency. Updates in the history have state
+ Completed if the rollout completed - if an update was failing or halfway
+ applied the state will be Partial. Only a limited amount of update history
+ is preserved.
items:
description: UpdateHistory is a single attempted update to the cluster.
properties:
acceptedRisks:
- description: acceptedRisks records risks which were accepted
- to initiate the update. For example, it may menition an Upgradeable=False
- or missing signature that was overriden via desiredUpdate.force,
- or an update that was initiated despite not being in the availableUpdates
- set of recommended update targets.
+ description: |-
+ acceptedRisks records risks which were accepted to initiate the update.
+ For example, it may menition an Upgradeable=False or missing signature
+ that was overriden via desiredUpdate.force, or an update that was
+ initiated despite not being in the availableUpdates set of recommended
+ update targets.
type: string
completionTime:
- description: completionTime, if set, is when the update was
- fully applied. The update that is currently being applied
- will have a null completion time. Completion time will always
- be set for entries that are not the current update (usually
- to the started time of the next update).
+ description: |-
+ completionTime, if set, is when the update was fully applied. The update
+ that is currently being applied will have a null completion time.
+ Completion time will always be set for entries that are not the current
+ update (usually to the started time of the next update).
format: date-time
nullable: true
type: string
image:
- description: image is a container image location that contains
- the update. This value is always populated.
+ description: |-
+ image is a container image location that contains the update. This value
+ is always populated.
type: string
startedTime:
description: startedTime is the time at which the update was
@@ -708,24 +739,24 @@ spec:
format: date-time
type: string
state:
- description: state reflects whether the update was fully applied.
- The Partial state indicates the update is not fully applied,
- while the Completed state indicates the update was successfully
- rolled out at least once (all parts of the update successfully
- applied).
+ description: |-
+ state reflects whether the update was fully applied. The Partial state
+ indicates the update is not fully applied, while the Completed state
+ indicates the update was successfully rolled out at least once (all
+ parts of the update successfully applied).
type: string
verified:
- description: verified indicates whether the provided update
- was properly verified before it was installed. If this is
- false the cluster may not be trusted. Verified does not cover
- upgradeable checks that depend on the cluster state at the
- time when the update target was accepted.
+ description: |-
+ verified indicates whether the provided update was properly verified
+ before it was installed. If this is false the cluster may not be trusted.
+ Verified does not cover upgradeable checks that depend on the cluster
+ state at the time when the update target was accepted.
type: boolean
version:
- description: version is a semantic version identifying the update
- version. If the requested image does not define a version,
- or if a failure occurs retrieving the image, this value may
- be empty.
+ description: |-
+ version is a semantic version identifying the update version. If the
+ requested image does not define a version, or if a failure occurs
+ retrieving the image, this value may be empty.
type: string
required:
- completionTime
@@ -737,16 +768,17 @@ spec:
type: array
x-kubernetes-list-type: atomic
observedGeneration:
- description: observedGeneration reports which version of the spec
- is being synced. If this value is not equal to metadata.generation,
- then the desired and conditions fields may represent a previous
- version.
+ description: |-
+ observedGeneration reports which version of the spec is being synced.
+ If this value is not equal to metadata.generation, then the desired
+ and conditions fields may represent a previous version.
format: int64
type: integer
versionHash:
- description: versionHash is a fingerprint of the content that the
- cluster will be updated with. It is used by the operator to avoid
- unnecessary work and is for internal use only.
+ description: |-
+ versionHash is a fingerprint of the content that the cluster will be
+ updated with. It is used by the operator to avoid unnecessary work
+ and is for internal use only.
type: string
required:
- availableUpdates
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_00_cluster-version-operator_01_clusterversions-TechPreviewNoUpgrade.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_00_cluster-version-operator_01_clusterversions-TechPreviewNoUpgrade.crd.yaml
index 21cd6c0d71a073ebde3f95cfc2ee91de12e23fa7..054817cd299c81fed40d8e0dff48966bb07839fb 100644
--- a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_00_cluster-version-operator_01_clusterversions-TechPreviewNoUpgrade.crd.yaml
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_00_cluster-version-operator_01_clusterversions-TechPreviewNoUpgrade.crd.yaml
@@ -35,36 +35,45 @@ spec:
name: v1
schema:
openAPIV3Schema:
- description: "ClusterVersion is the configuration for the ClusterVersionOperator.
- This is where parameters related to automatic updates can be set. \n Compatibility
- level 1: Stable within a major release for a minimum of 12 months or 3 minor
- releases (whichever is longer)."
+ description: |-
+ ClusterVersion is the configuration for the ClusterVersionOperator. This is where
+ parameters related to automatic updates can be set.
+
+ Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
spec:
- description: spec is the desired state of the cluster version - the operator
- will work to ensure that the desired version is applied to the cluster.
+ description: |-
+ spec is the desired state of the cluster version - the operator will work
+ to ensure that the desired version is applied to the cluster.
properties:
capabilities:
- description: capabilities configures the installation of optional,
- core cluster components. A null value here is identical to an empty
- object; see the child properties for default semantics.
+ description: |-
+ capabilities configures the installation of optional, core
+ cluster components. A null value here is identical to an
+ empty object; see the child properties for default semantics.
properties:
additionalEnabledCapabilities:
- description: additionalEnabledCapabilities extends the set of
- managed capabilities beyond the baseline defined in baselineCapabilitySet. The
- default is an empty set.
+ description: |-
+ additionalEnabledCapabilities extends the set of managed
+ capabilities beyond the baseline defined in
+ baselineCapabilitySet. The default is an empty set.
items:
description: ClusterVersionCapability enumerates optional, core
cluster components.
@@ -85,14 +94,17 @@ spec:
- CloudCredential
- Ingress
- CloudControllerManager
+ - OperatorLifecycleManagerV1
type: string
type: array
x-kubernetes-list-type: atomic
baselineCapabilitySet:
- description: baselineCapabilitySet selects an initial set of optional
- capabilities to enable, which can be extended via additionalEnabledCapabilities. If
- unset, the cluster will choose a default, and the default may
- change over time. The current default is vCurrent.
+ description: |-
+ baselineCapabilitySet selects an initial set of
+ optional capabilities to enable, which can be extended via
+ additionalEnabledCapabilities. If unset, the cluster will
+ choose a default, and the default may change over time.
+ The current default is vCurrent.
enum:
- None
- v4.11
@@ -107,74 +119,76 @@ spec:
type: string
type: object
channel:
- description: channel is an identifier for explicitly requesting that
- a non-default set of updates be applied to this cluster. The default
- channel will be contain stable updates that are appropriate for
- production clusters.
+ description: |-
+ channel is an identifier for explicitly requesting that a non-default
+ set of updates be applied to this cluster. The default channel will be
+ contain stable updates that are appropriate for production clusters.
type: string
clusterID:
- description: clusterID uniquely identifies this cluster. This is expected
- to be an RFC4122 UUID value (xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
- in hexadecimal values). This is a required field.
+ description: |-
+ clusterID uniquely identifies this cluster. This is expected to be
+ an RFC4122 UUID value (xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx in
+ hexadecimal values). This is a required field.
type: string
desiredUpdate:
- description: "desiredUpdate is an optional field that indicates the
- desired value of the cluster version. Setting this value will trigger
- an upgrade (if the current version does not match the desired version).
- The set of recommended update values is listed as part of available
- updates in status, and setting values outside that range may cause
- the upgrade to fail. \n Some of the fields are inter-related with
- restrictions and meanings described here. 1. image is specified,
- version is specified, architecture is specified. API validation
- error. 2. image is specified, version is specified, architecture
- is not specified. You should not do this. version is silently ignored
- and image is used. 3. image is specified, version is not specified,
- architecture is specified. API validation error. 4. image is specified,
- version is not specified, architecture is not specified. image is
- used. 5. image is not specified, version is specified, architecture
- is specified. version and desired architecture are used to select
- an image. 6. image is not specified, version is specified, architecture
- is not specified. version and current architecture are used to select
- an image. 7. image is not specified, version is not specified, architecture
- is specified. API validation error. 8. image is not specified, version
- is not specified, architecture is not specified. API validation
- error. \n If an upgrade fails the operator will halt and report
- status about the failing component. Setting the desired update value
- back to the previous version will cause a rollback to be attempted.
- Not all rollbacks will succeed."
+ description: |-
+ desiredUpdate is an optional field that indicates the desired value of
+ the cluster version. Setting this value will trigger an upgrade (if
+ the current version does not match the desired version). The set of
+ recommended update values is listed as part of available updates in
+ status, and setting values outside that range may cause the upgrade
+ to fail.
+
+ Some of the fields are inter-related with restrictions and meanings described here.
+ 1. image is specified, version is specified, architecture is specified. API validation error.
+ 2. image is specified, version is specified, architecture is not specified. You should not do this. version is silently ignored and image is used.
+ 3. image is specified, version is not specified, architecture is specified. API validation error.
+ 4. image is specified, version is not specified, architecture is not specified. image is used.
+ 5. image is not specified, version is specified, architecture is specified. version and desired architecture are used to select an image.
+ 6. image is not specified, version is specified, architecture is not specified. version and current architecture are used to select an image.
+ 7. image is not specified, version is not specified, architecture is specified. API validation error.
+ 8. image is not specified, version is not specified, architecture is not specified. API validation error.
+
+ If an upgrade fails the operator will halt and report status
+ about the failing component. Setting the desired update value back to
+ the previous version will cause a rollback to be attempted. Not all
+ rollbacks will succeed.
properties:
architecture:
- description: architecture is an optional field that indicates
- the desired value of the cluster architecture. In this context
- cluster architecture means either a single architecture or a
- multi architecture. architecture can only be set to Multi thereby
+ description: |-
+ architecture is an optional field that indicates the desired
+ value of the cluster architecture. In this context cluster
+ architecture means either a single architecture or a multi
+ architecture. architecture can only be set to Multi thereby
only allowing updates from single to multi architecture. If
architecture is set, image cannot be set and version must be
- set. Valid values are 'Multi' and empty.
+ set.
+ Valid values are 'Multi' and empty.
enum:
- Multi
- ""
type: string
force:
- description: force allows an administrator to update to an image
- that has failed verification or upgradeable checks. This option
- should only be used when the authenticity of the provided image
- has been verified out of band because the provided image will
- run with full administrative access to the cluster. Do not use
- this flag with images that comes from unknown or potentially
- malicious sources.
+ description: |-
+ force allows an administrator to update to an image that has failed
+ verification or upgradeable checks. This option should only
+ be used when the authenticity of the provided image has been verified out
+ of band because the provided image will run with full administrative access
+ to the cluster. Do not use this flag with images that comes from unknown
+ or potentially malicious sources.
type: boolean
image:
- description: image is a container image location that contains
- the update. image should be used when the desired version does
- not exist in availableUpdates or history. When image is set,
- version is ignored. When image is set, version should be empty.
+ description: |-
+ image is a container image location that contains the update.
+ image should be used when the desired version does not exist in availableUpdates or history.
+ When image is set, version is ignored. When image is set, version should be empty.
When image is set, architecture cannot be specified.
type: string
version:
- description: version is a semantic version identifying the update
- version. version is ignored if image is specified and required
- if architecture is specified.
+ description: |-
+ version is a semantic version identifying the update version.
+ version is ignored if image is specified and required if
+ architecture is specified.
type: string
type: object
x-kubernetes-validations:
@@ -185,12 +199,14 @@ spec:
rule: 'has(self.architecture) && self.architecture != '''' ? self.version
!= '''' : true'
overrides:
- description: overrides is list of overides for components that are
- managed by cluster version operator. Marking a component unmanaged
- will prevent the operator from creating or updating the object.
+ description: |-
+ overrides is list of overides for components that are managed by
+ cluster version operator. Marking a component unmanaged will prevent
+ the operator from creating or updating the object.
items:
- description: ComponentOverride allows overriding cluster version
- operator's behavior for a component.
+ description: |-
+ ComponentOverride allows overriding cluster version operator's behavior
+ for a component.
properties:
group:
description: group identifies the API group that the kind is
@@ -203,13 +219,15 @@ spec:
description: name is the component's name.
type: string
namespace:
- description: namespace is the component's namespace. If the
- resource is cluster scoped, the namespace should be empty.
+ description: |-
+ namespace is the component's namespace. If the resource is cluster
+ scoped, the namespace should be empty.
type: string
unmanaged:
- description: 'unmanaged controls if cluster version operator
- should stop managing the resources in this cluster. Default:
- false'
+ description: |-
+ unmanaged controls if cluster version operator should stop managing the
+ resources in this cluster.
+ Default: false
type: boolean
required:
- group
@@ -226,33 +244,31 @@ spec:
- name
x-kubernetes-list-type: map
signatureStores:
- description: "signatureStores contains the upstream URIs to verify
- release signatures and optional reference to a config map by name
- containing the PEM-encoded CA bundle. \n By default, CVO will use
- existing signature stores if this property is empty. The CVO will
- check the release signatures in the local ConfigMaps first. It will
- search for a valid signature in these stores in parallel only when
- local ConfigMaps did not include a valid signature. Validation will
- fail if none of the signature stores reply with valid signature
- before timeout. Setting signatureStores will replace the default
- signature stores with custom signature stores. Default stores can
- be used with custom signature stores by adding them manually. \n
- A maximum of 32 signature stores may be configured."
+ description: |-
+ signatureStores contains the upstream URIs to verify release signatures and optional
+ reference to a config map by name containing the PEM-encoded CA bundle.
+
+ By default, CVO will use existing signature stores if this property is empty.
+ The CVO will check the release signatures in the local ConfigMaps first. It will search for a valid signature
+ in these stores in parallel only when local ConfigMaps did not include a valid signature.
+ Validation will fail if none of the signature stores reply with valid signature before timeout.
+ Setting signatureStores will replace the default signature stores with custom signature stores.
+ Default stores can be used with custom signature stores by adding them manually.
+
+ A maximum of 32 signature stores may be configured.
items:
description: SignatureStore represents the URL of custom Signature
Store
properties:
ca:
- description: ca is an optional reference to a config map by
- name containing the PEM-encoded CA bundle. It is used as a
- trust anchor to validate the TLS certificate presented by
- the remote server. The key "ca.crt" is used to locate the
- data. If specified and the config map or expected key is not
- found, the signature store is not honored. If the specified
- ca data is not valid, the signature store is not honored.
- If empty, we fall back to the CA configured via Proxy, which
- is appended to the default system roots. The namespace for
- this config map is openshift-config.
+ description: |-
+ ca is an optional reference to a config map by name containing the PEM-encoded CA bundle.
+ It is used as a trust anchor to validate the TLS certificate presented by the remote server.
+ The key "ca.crt" is used to locate the data.
+ If specified and the config map or expected key is not found, the signature store is not honored.
+ If the specified ca data is not valid, the signature store is not honored.
+ If empty, we fall back to the CA configured via Proxy, which is appended to the default system roots.
+ The namespace for this config map is openshift-config.
properties:
name:
description: name is the metadata.name of the referenced
@@ -262,10 +278,10 @@ spec:
- name
type: object
url:
- description: url contains the upstream custom signature store
- URL. url should be a valid absolute http/https URI of an upstream
- signature store as per rfc1738. This must be provided and
- cannot be empty.
+ description: |-
+ url contains the upstream custom signature store URL.
+ url should be a valid absolute http/https URI of an upstream signature store as per rfc1738.
+ This must be provided and cannot be empty.
type: string
x-kubernetes-validations:
- message: url must be a valid absolute URL
@@ -279,52 +295,59 @@ spec:
- url
x-kubernetes-list-type: map
upstream:
- description: upstream may be used to specify the preferred update
- server. By default it will use the appropriate update server for
- the cluster and region.
+ description: |-
+ upstream may be used to specify the preferred update server. By default
+ it will use the appropriate update server for the cluster and region.
type: string
required:
- clusterID
type: object
status:
- description: status contains information about the available updates and
- any in-progress updates.
+ description: |-
+ status contains information about the available updates and any in-progress
+ updates.
properties:
availableUpdates:
- description: availableUpdates contains updates recommended for this
- cluster. Updates which appear in conditionalUpdates but not in availableUpdates
- may expose this cluster to known issues. This list may be empty
- if no updates are recommended, if the update service is unavailable,
- or if an invalid channel has been specified.
+ description: |-
+ availableUpdates contains updates recommended for this
+ cluster. Updates which appear in conditionalUpdates but not in
+ availableUpdates may expose this cluster to known issues. This list
+ may be empty if no updates are recommended, if the update service
+ is unavailable, or if an invalid channel has been specified.
items:
description: Release represents an OpenShift release image and associated
metadata.
properties:
channels:
- description: channels is the set of Cincinnati channels to which
- the release currently belongs.
+ description: |-
+ channels is the set of Cincinnati channels to which the release
+ currently belongs.
items:
type: string
type: array
x-kubernetes-list-type: set
image:
- description: image is a container image location that contains
- the update. When this field is part of spec, image is optional
- if version is specified and the availableUpdates field contains
- a matching version.
+ description: |-
+ image is a container image location that contains the update. When this
+ field is part of spec, image is optional if version is specified and the
+ availableUpdates field contains a matching version.
type: string
url:
- description: url contains information about this release. This
- URL is set by the 'url' metadata property on a release or
- the metadata returned by the update API and should be displayed
- as a link in user interfaces. The URL field may not be set
- for test or nightly releases.
+ description: |-
+ url contains information about this release. This URL is set by
+ the 'url' metadata property on a release or the metadata returned by
+ the update API and should be displayed as a link in user
+ interfaces. The URL field may not be set for test or nightly
+ releases.
type: string
version:
- description: version is a semantic version identifying the update
- version. When this field is part of spec, version is optional
- if image is specified.
+ description: |-
+ version is a semantic version identifying the update version. When this
+ field is part of spec, version is optional if image is specified.
type: string
+ required:
+ - image
+ - version
type: object
nullable: true
type: array
@@ -356,6 +379,7 @@ spec:
- CloudCredential
- Ingress
- CloudControllerManager
+ - OperatorLifecycleManagerV1
type: string
type: array
x-kubernetes-list-type: atomic
@@ -382,69 +406,62 @@ spec:
- CloudCredential
- Ingress
- CloudControllerManager
+ - OperatorLifecycleManagerV1
type: string
type: array
x-kubernetes-list-type: atomic
type: object
conditionalUpdates:
- description: conditionalUpdates contains the list of updates that
- may be recommended for this cluster if it meets specific required
+ description: |-
+ conditionalUpdates contains the list of updates that may be
+ recommended for this cluster if it meets specific required
conditions. Consumers interested in the set of updates that are
- actually recommended for this cluster should use availableUpdates.
- This list may be empty if no updates are recommended, if the update
- service is unavailable, or if an empty or invalid channel has been
- specified.
+ actually recommended for this cluster should use
+ availableUpdates. This list may be empty if no updates are
+ recommended, if the update service is unavailable, or if an empty
+ or invalid channel has been specified.
items:
- description: ConditionalUpdate represents an update which is recommended
- to some clusters on the version the current cluster is reconciling,
- but which may not be recommended for the current cluster.
+ description: |-
+ ConditionalUpdate represents an update which is recommended to some
+ clusters on the version the current cluster is reconciling, but which
+ may not be recommended for the current cluster.
properties:
conditions:
- description: 'conditions represents the observations of the
- conditional update''s current status. Known types are: * Recommended,
- for whether the update is recommended for the current cluster.'
+ description: |-
+ conditions represents the observations of the conditional update's
+ current status. Known types are:
+ * Recommended, for whether the update is recommended for the current cluster.
items:
- description: "Condition contains details for one aspect of
- the current state of this API Resource. --- This struct
- is intended for direct use as an array at the field path
- .status.conditions. For example, \n type FooStatus struct{
- // Represents the observations of a foo's current state.
- // Known .status.conditions.type are: \"Available\", \"Progressing\",
- and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge
- // +listType=map // +listMapKey=type Conditions []metav1.Condition
- `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\"
- protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields
- }"
+ description: Condition contains details for one aspect of
+ the current state of this API Resource.
properties:
lastTransitionTime:
- description: lastTransitionTime is the last time the condition
- transitioned from one status to another. This should
- be when the underlying condition changed. If that is
- not known, then using the time when the API field changed
- is acceptable.
+ description: |-
+ lastTransitionTime is the last time the condition transitioned from one status to another.
+ This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.
format: date-time
type: string
message:
- description: message is a human readable message indicating
- details about the transition. This may be an empty string.
+ description: |-
+ message is a human readable message indicating details about the transition.
+ This may be an empty string.
maxLength: 32768
type: string
observedGeneration:
- description: observedGeneration represents the .metadata.generation
- that the condition was set based upon. For instance,
- if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration
- is 9, the condition is out of date with respect to the
- current state of the instance.
+ description: |-
+ observedGeneration represents the .metadata.generation that the condition was set based upon.
+ For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
+ with respect to the current state of the instance.
format: int64
minimum: 0
type: integer
reason:
- description: reason contains a programmatic identifier
- indicating the reason for the condition's last transition.
- Producers of specific condition types may define expected
- values and meanings for this field, and whether the
- values are considered a guaranteed API. The value should
- be a CamelCase string. This field may not be empty.
+ description: |-
+ reason contains a programmatic identifier indicating the reason for the condition's last transition.
+ Producers of specific condition types may define expected values and meanings for this field,
+ and whether the values are considered a guaranteed API.
+ The value should be a CamelCase string.
+ This field may not be empty.
maxLength: 1024
minLength: 1
pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
@@ -459,11 +476,6 @@ spec:
type: string
type:
description: type of condition in CamelCase or in foo.example.com/CamelCase.
- --- Many .condition.type values are consistent across
- resources like Available, but because arbitrary conditions
- can be useful (see .node.status.conditions), the ability
- to deconflict is important. The regex it matches is
- (dns1123SubdomainFmt/)?(qualifiedNameFmt)
maxLength: 316
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
@@ -482,75 +494,82 @@ spec:
description: release is the target of the update.
properties:
channels:
- description: channels is the set of Cincinnati channels
- to which the release currently belongs.
+ description: |-
+ channels is the set of Cincinnati channels to which the release
+ currently belongs.
items:
type: string
type: array
x-kubernetes-list-type: set
image:
- description: image is a container image location that contains
- the update. When this field is part of spec, image is
- optional if version is specified and the availableUpdates
- field contains a matching version.
+ description: |-
+ image is a container image location that contains the update. When this
+ field is part of spec, image is optional if version is specified and the
+ availableUpdates field contains a matching version.
type: string
url:
- description: url contains information about this release.
- This URL is set by the 'url' metadata property on a release
- or the metadata returned by the update API and should
- be displayed as a link in user interfaces. The URL field
- may not be set for test or nightly releases.
+ description: |-
+ url contains information about this release. This URL is set by
+ the 'url' metadata property on a release or the metadata returned by
+ the update API and should be displayed as a link in user
+ interfaces. The URL field may not be set for test or nightly
+ releases.
type: string
version:
- description: version is a semantic version identifying the
- update version. When this field is part of spec, version
- is optional if image is specified.
+ description: |-
+ version is a semantic version identifying the update version. When this
+ field is part of spec, version is optional if image is specified.
type: string
+ required:
+ - image
+ - version
type: object
risks:
- description: risks represents the range of issues associated
- with updating to the target release. The cluster-version operator
- will evaluate all entries, and only recommend the update if
- there is at least one entry and all entries recommend the
- update.
+ description: |-
+ risks represents the range of issues associated with
+ updating to the target release. The cluster-version
+ operator will evaluate all entries, and only recommend the
+ update if there is at least one entry and all entries
+ recommend the update.
items:
- description: ConditionalUpdateRisk represents a reason and
- cluster-state for not recommending a conditional update.
+ description: |-
+ ConditionalUpdateRisk represents a reason and cluster-state
+ for not recommending a conditional update.
properties:
matchingRules:
- description: matchingRules is a slice of conditions for
- deciding which clusters match the risk and which do
- not. The slice is ordered by decreasing precedence.
- The cluster-version operator will walk the slice in
- order, and stop after the first it can successfully
- evaluate. If no condition can be successfully evaluated,
- the update will not be recommended.
+ description: |-
+ matchingRules is a slice of conditions for deciding which
+ clusters match the risk and which do not. The slice is
+ ordered by decreasing precedence. The cluster-version
+ operator will walk the slice in order, and stop after the
+ first it can successfully evaluate. If no condition can be
+ successfully evaluated, the update will not be recommended.
items:
- description: ClusterCondition is a union of typed cluster
- conditions. The 'type' property determines which
- of the type-specific properties are relevant. When
- evaluated on a cluster, the condition may match, not
- match, or fail to evaluate.
+ description: |-
+ ClusterCondition is a union of typed cluster conditions. The 'type'
+ property determines which of the type-specific properties are relevant.
+ When evaluated on a cluster, the condition may match, not match, or
+ fail to evaluate.
properties:
promql:
description: promQL represents a cluster condition
based on PromQL.
properties:
promql:
- description: PromQL is a PromQL query classifying
- clusters. This query query should return a
- 1 in the match case and a 0 in the does-not-match
- case. Queries which return no time series,
- or which return values besides 0 or 1, are
+ description: |-
+ PromQL is a PromQL query classifying clusters. This query
+ query should return a 1 in the match case and a 0 in the
+ does-not-match case. Queries which return no time
+ series, or which return values besides 0 or 1, are
evaluation failures.
type: string
required:
- promql
type: object
type:
- description: type represents the cluster-condition
- type. This defines the members and semantics of
- any additional properties.
+ description: |-
+ type represents the cluster-condition type. This defines
+ the members and semantics of any additional properties.
enum:
- Always
- PromQL
@@ -562,17 +581,19 @@ spec:
type: array
x-kubernetes-list-type: atomic
message:
- description: message provides additional information about
- the risk of updating, in the event that matchingRules
- match the cluster state. This is only to be consumed
- by humans. It may contain Line Feed characters (U+000A),
- which should be rendered as new lines.
+ description: |-
+ message provides additional information about the risk of
+ updating, in the event that matchingRules match the cluster
+ state. This is only to be consumed by humans. It may
+ contain Line Feed characters (U+000A), which should be
+ rendered as new lines.
minLength: 1
type: string
name:
- description: name is the CamelCase reason for not recommending
- a conditional update, in the event that matchingRules
- match the cluster state.
+ description: |-
+ name is the CamelCase reason for not recommending a
+ conditional update, in the event that matchingRules match the
+ cluster state.
minLength: 1
type: string
url:
@@ -598,16 +619,18 @@ spec:
type: array
x-kubernetes-list-type: atomic
conditions:
- description: conditions provides information about the cluster version.
- The condition "Available" is set to true if the desiredUpdate has
- been reached. The condition "Progressing" is set to true if an update
- is being applied. The condition "Degraded" is set to true if an
- update is currently blocked by a temporary or permanent error. Conditions
- are only valid for the current desiredUpdate when metadata.generation
- is equal to status.generation.
+ description: |-
+ conditions provides information about the cluster version. The condition
+ "Available" is set to true if the desiredUpdate has been reached. The
+ condition "Progressing" is set to true if an update is being applied.
+ The condition "Degraded" is set to true if an update is currently blocked
+ by a temporary or permanent error. Conditions are only valid for the
+ current desiredUpdate when metadata.generation is equal to
+ status.generation.
items:
- description: ClusterOperatorStatusCondition represents the state
- of the operator's managed and monitored components.
+ description: |-
+ ClusterOperatorStatusCondition represents the state of the operator's
+ managed and monitored components.
properties:
lastTransitionTime:
description: lastTransitionTime is the time of the last update
@@ -615,10 +638,10 @@ spec:
format: date-time
type: string
message:
- description: message provides additional information about the
- current condition. This is only to be consumed by humans. It
- may contain Line Feed characters (U+000A), which should be
- rendered as new lines.
+ description: |-
+ message provides additional information about the current condition.
+ This is only to be consumed by humans. It may contain Line Feed
+ characters (U+000A), which should be rendered as new lines.
type: string
reason:
description: reason is the CamelCase reason for the condition's
@@ -640,67 +663,75 @@ spec:
- type
x-kubernetes-list-type: map
desired:
- description: desired is the version that the cluster is reconciling
- towards. If the cluster is not yet fully initialized desired will
- be set with the information available, which may be an image or
- a tag.
+ description: |-
+ desired is the version that the cluster is reconciling towards.
+ If the cluster is not yet fully initialized desired will be set
+ with the information available, which may be an image or a tag.
properties:
channels:
- description: channels is the set of Cincinnati channels to which
- the release currently belongs.
+ description: |-
+ channels is the set of Cincinnati channels to which the release
+ currently belongs.
items:
type: string
type: array
x-kubernetes-list-type: set
image:
- description: image is a container image location that contains
- the update. When this field is part of spec, image is optional
- if version is specified and the availableUpdates field contains
- a matching version.
+ description: |-
+ image is a container image location that contains the update. When this
+ field is part of spec, image is optional if version is specified and the
+ availableUpdates field contains a matching version.
type: string
url:
- description: url contains information about this release. This
- URL is set by the 'url' metadata property on a release or the
- metadata returned by the update API and should be displayed
- as a link in user interfaces. The URL field may not be set for
- test or nightly releases.
+ description: |-
+ url contains information about this release. This URL is set by
+ the 'url' metadata property on a release or the metadata returned by
+ the update API and should be displayed as a link in user
+ interfaces. The URL field may not be set for test or nightly
+ releases.
type: string
version:
- description: version is a semantic version identifying the update
- version. When this field is part of spec, version is optional
- if image is specified.
+ description: |-
+ version is a semantic version identifying the update version. When this
+ field is part of spec, version is optional if image is specified.
type: string
+ required:
+ - image
+ - version
type: object
history:
- description: history contains a list of the most recent versions applied
- to the cluster. This value may be empty during cluster startup,
- and then will be updated when a new update is being applied. The
- newest update is first in the list and it is ordered by recency.
- Updates in the history have state Completed if the rollout completed
- - if an update was failing or halfway applied the state will be
- Partial. Only a limited amount of update history is preserved.
+ description: |-
+ history contains a list of the most recent versions applied to the cluster.
+ This value may be empty during cluster startup, and then will be updated
+ when a new update is being applied. The newest update is first in the
+ list and it is ordered by recency. Updates in the history have state
+ Completed if the rollout completed - if an update was failing or halfway
+ applied the state will be Partial. Only a limited amount of update history
+ is preserved.
items:
description: UpdateHistory is a single attempted update to the cluster.
properties:
acceptedRisks:
- description: acceptedRisks records risks which were accepted
- to initiate the update. For example, it may menition an Upgradeable=False
- or missing signature that was overriden via desiredUpdate.force,
- or an update that was initiated despite not being in the availableUpdates
- set of recommended update targets.
+ description: |-
+ acceptedRisks records risks which were accepted to initiate the update.
+ For example, it may menition an Upgradeable=False or missing signature
+ that was overriden via desiredUpdate.force, or an update that was
+ initiated despite not being in the availableUpdates set of recommended
+ update targets.
type: string
completionTime:
- description: completionTime, if set, is when the update was
- fully applied. The update that is currently being applied
- will have a null completion time. Completion time will always
- be set for entries that are not the current update (usually
- to the started time of the next update).
+ description: |-
+ completionTime, if set, is when the update was fully applied. The update
+ that is currently being applied will have a null completion time.
+ Completion time will always be set for entries that are not the current
+ update (usually to the started time of the next update).
format: date-time
nullable: true
type: string
image:
- description: image is a container image location that contains
- the update. This value is always populated.
+ description: |-
+ image is a container image location that contains the update. This value
+ is always populated.
type: string
startedTime:
description: startedTime is the time at which the update was
@@ -708,24 +739,24 @@ spec:
format: date-time
type: string
state:
- description: state reflects whether the update was fully applied.
- The Partial state indicates the update is not fully applied,
- while the Completed state indicates the update was successfully
- rolled out at least once (all parts of the update successfully
- applied).
+ description: |-
+ state reflects whether the update was fully applied. The Partial state
+ indicates the update is not fully applied, while the Completed state
+ indicates the update was successfully rolled out at least once (all
+ parts of the update successfully applied).
type: string
verified:
- description: verified indicates whether the provided update
- was properly verified before it was installed. If this is
- false the cluster may not be trusted. Verified does not cover
- upgradeable checks that depend on the cluster state at the
- time when the update target was accepted.
+ description: |-
+ verified indicates whether the provided update was properly verified
+ before it was installed. If this is false the cluster may not be trusted.
+ Verified does not cover upgradeable checks that depend on the cluster
+ state at the time when the update target was accepted.
type: boolean
version:
- description: version is a semantic version identifying the update
- version. If the requested image does not define a version,
- or if a failure occurs retrieving the image, this value may
- be empty.
+ description: |-
+ version is a semantic version identifying the update version. If the
+ requested image does not define a version, or if a failure occurs
+ retrieving the image, this value may be empty.
type: string
required:
- completionTime
@@ -737,16 +768,17 @@ spec:
type: array
x-kubernetes-list-type: atomic
observedGeneration:
- description: observedGeneration reports which version of the spec
- is being synced. If this value is not equal to metadata.generation,
- then the desired and conditions fields may represent a previous
- version.
+ description: |-
+ observedGeneration reports which version of the spec is being synced.
+ If this value is not equal to metadata.generation, then the desired
+ and conditions fields may represent a previous version.
format: int64
type: integer
versionHash:
- description: versionHash is a fingerprint of the content that the
- cluster will be updated with. It is used by the operator to avoid
- unnecessary work and is for internal use only.
+ description: |-
+ versionHash is a fingerprint of the content that the cluster will be
+ updated with. It is used by the operator to avoid unnecessary work
+ and is for internal use only.
type: string
required:
- availableUpdates
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_03_config-operator_01_proxies.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_03_config-operator_01_proxies.crd.yaml
index d2db3c826f16d2c9ca3783e282c7b97090720089..b774262cd02c46df45a53e60a5914b9971c93bf0 100644
--- a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_03_config-operator_01_proxies.crd.yaml
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_03_config-operator_01_proxies.crd.yaml
@@ -20,20 +20,25 @@ spec:
- name: v1
schema:
openAPIV3Schema:
- description: "Proxy holds cluster-wide information on how to configure default
- proxies for the cluster. The canonical name is `cluster` \n Compatibility
- level 1: Stable within a major release for a minimum of 12 months or 3 minor
- releases (whichever is longer)."
+ description: |-
+ Proxy holds cluster-wide information on how to configure default proxies for the cluster. The canonical name is `cluster`
+
+ Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -49,9 +54,9 @@ spec:
means unset and will not result in an env var.
type: string
noProxy:
- description: noProxy is a comma-separated list of hostnames and/or
- CIDRs and/or IPs for which the proxy should not be used. Empty means
- unset and will not result in an env var.
+ description: |-
+ noProxy is a comma-separated list of hostnames and/or CIDRs and/or IPs for which the proxy should not be used.
+ Empty means unset and will not result in an env var.
type: string
readinessEndpoints:
description: readinessEndpoints is a list of endpoints used to verify
@@ -60,20 +65,30 @@ spec:
type: string
type: array
trustedCA:
- description: "trustedCA is a reference to a ConfigMap containing a
- CA certificate bundle. The trustedCA field should only be consumed
- by a proxy validator. The validator is responsible for reading the
- certificate bundle from the required key \"ca-bundle.crt\", merging
- it with the system default trust bundle, and writing the merged
- trust bundle to a ConfigMap named \"trusted-ca-bundle\" in the \"openshift-config-managed\"
- namespace. Clients that expect to make proxy connections must use
- the trusted-ca-bundle for all HTTPS requests to the proxy, and may
- use the trusted-ca-bundle for non-proxy HTTPS requests as well.
- \n The namespace for the ConfigMap referenced by trustedCA is \"openshift-config\".
- Here is an example ConfigMap (in yaml): \n apiVersion: v1 kind:
- ConfigMap metadata: name: user-ca-bundle namespace: openshift-config
- data: ca-bundle.crt: | -----BEGIN CERTIFICATE----- Custom CA certificate
- bundle. -----END CERTIFICATE-----"
+ description: |-
+ trustedCA is a reference to a ConfigMap containing a CA certificate bundle.
+ The trustedCA field should only be consumed by a proxy validator. The
+ validator is responsible for reading the certificate bundle from the required
+ key "ca-bundle.crt", merging it with the system default trust bundle,
+ and writing the merged trust bundle to a ConfigMap named "trusted-ca-bundle"
+ in the "openshift-config-managed" namespace. Clients that expect to make
+ proxy connections must use the trusted-ca-bundle for all HTTPS requests to
+ the proxy, and may use the trusted-ca-bundle for non-proxy HTTPS requests as
+ well.
+
+ The namespace for the ConfigMap referenced by trustedCA is
+ "openshift-config". Here is an example ConfigMap (in yaml):
+
+ apiVersion: v1
+ kind: ConfigMap
+ metadata:
+ name: user-ca-bundle
+ namespace: openshift-config
+ data:
+ ca-bundle.crt: |
+ -----BEGIN CERTIFICATE-----
+ Custom CA certificate bundle.
+ -----END CERTIFICATE-----
properties:
name:
description: name is the metadata.name of the referenced config
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_03_marketplace_01_operatorhubs.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_03_marketplace_01_operatorhubs.crd.yaml
index aad0829d92e9b50c4312e9a5f1ba42151fc38d9e..00c43ede74c728a25f980bd723a4a57e4453af85 100644
--- a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_03_marketplace_01_operatorhubs.crd.yaml
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_03_marketplace_01_operatorhubs.crd.yaml
@@ -20,21 +20,27 @@ spec:
- name: v1
schema:
openAPIV3Schema:
- description: "OperatorHub is the Schema for the operatorhubs API. It can be
- used to change the state of the default hub sources for OperatorHub on the
- cluster from enabled to disabled and vice versa. \n Compatibility level
- 1: Stable within a major release for a minimum of 12 months or 3 minor releases
- (whichever is longer)."
+ description: |-
+ OperatorHub is the Schema for the operatorhubs API. It can be used to change
+ the state of the default hub sources for OperatorHub on the cluster from
+ enabled to disabled and vice versa.
+
+ Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -42,19 +48,21 @@ spec:
description: OperatorHubSpec defines the desired state of OperatorHub
properties:
disableAllDefaultSources:
- description: disableAllDefaultSources allows you to disable all the
- default hub sources. If this is true, a specific entry in sources
- can be used to enable a default source. If this is false, a specific
- entry in sources can be used to disable or enable a default source.
+ description: |-
+ disableAllDefaultSources allows you to disable all the default hub
+ sources. If this is true, a specific entry in sources can be used to
+ enable a default source. If this is false, a specific entry in
+ sources can be used to disable or enable a default source.
type: boolean
sources:
- description: sources is the list of default hub sources and their
- configuration. If the list is empty, it implies that the default
- hub sources are enabled on the cluster unless disableAllDefaultSources
- is true. If disableAllDefaultSources is true and sources is not
- empty, the configuration present in sources will take precedence.
- The list of default hub sources and their current state will always
- be reflected in the status block.
+ description: |-
+ sources is the list of default hub sources and their configuration.
+ If the list is empty, it implies that the default hub sources are
+ enabled on the cluster unless disableAllDefaultSources is true.
+ If disableAllDefaultSources is true and sources is not empty,
+ the configuration present in sources will take precedence. The list of
+ default hub sources and their current state will always be reflected in
+ the status block.
items:
description: HubSource is used to specify the hub source and its
configuration
@@ -72,16 +80,18 @@ spec:
type: array
type: object
status:
- description: OperatorHubStatus defines the observed state of OperatorHub.
- The current state of the default hub sources will always be reflected
- here.
+ description: |-
+ OperatorHubStatus defines the observed state of OperatorHub. The current
+ state of the default hub sources will always be reflected here.
properties:
sources:
- description: sources encapsulates the result of applying the configuration
- for each hub source
+ description: |-
+ sources encapsulates the result of applying the configuration for each
+ hub source
items:
- description: HubSourceStatus is used to reflect the current state
- of applying the configuration to a default source
+ description: |-
+ HubSourceStatus is used to reflect the current state of applying the
+ configuration to a default source
properties:
disabled:
description: disabled is used to disable a default hub source
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_apiservers.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_apiservers.crd.yaml
index c1ffb1e76e0730a59418bd4c06e125bd291db6f3..8dd63a32891b3ea339829c6edd20eea26da7ccd0 100644
--- a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_apiservers.crd.yaml
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_apiservers.crd.yaml
@@ -20,21 +20,27 @@ spec:
- name: v1
schema:
openAPIV3Schema:
- description: "APIServer holds configuration (like serving certificates, client
- CA and CORS domains) shared by all API servers in the system, among them
- especially kube-apiserver and openshift-apiserver. The canonical name of
- an instance is 'cluster'. \n Compatibility level 1: Stable within a major
- release for a minimum of 12 months or 3 minor releases (whichever is longer)."
+ description: |-
+ APIServer holds configuration (like serving certificates, client CA and CORS domains)
+ shared by all API servers in the system, among them especially kube-apiserver
+ and openshift-apiserver. The canonical name of an instance is 'cluster'.
+
+ Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -42,29 +48,30 @@ spec:
description: spec holds user settable values for configuration
properties:
additionalCORSAllowedOrigins:
- description: additionalCORSAllowedOrigins lists additional, user-defined
- regular expressions describing hosts for which the API server allows
- access using the CORS headers. This may be needed to access the
- API and the integrated OAuth server from JavaScript applications.
- The values are regular expressions that correspond to the Golang
- regular expression language.
+ description: |-
+ additionalCORSAllowedOrigins lists additional, user-defined regular expressions describing hosts for which the
+ API server allows access using the CORS headers. This may be needed to access the API and the integrated OAuth
+ server from JavaScript applications.
+ The values are regular expressions that correspond to the Golang regular expression language.
items:
type: string
type: array
audit:
default:
profile: Default
- description: audit specifies the settings for audit configuration
- to be applied to all OpenShift-provided API servers in the cluster.
+ description: |-
+ audit specifies the settings for audit configuration to be applied to all OpenShift-provided
+ API servers in the cluster.
properties:
customRules:
- description: customRules specify profiles per group. These profile
- take precedence over the top-level profile field if they apply.
- They are evaluation from top to bottom and the first one that
- matches, applies.
+ description: |-
+ customRules specify profiles per group. These profile take precedence over the
+ top-level profile field if they apply. They are evaluation from top to bottom and
+ the first one that matches, applies.
items:
- description: AuditCustomRule describes a custom rule for an
- audit profile that takes precedence over the top-level profile.
+ description: |-
+ AuditCustomRule describes a custom rule for an audit profile that takes precedence over
+ the top-level profile.
properties:
group:
description: group is a name of group a request user must
@@ -72,17 +79,19 @@ spec:
minLength: 1
type: string
profile:
- description: "profile specifies the name of the desired
- audit policy configuration to be deployed to all OpenShift-provided
- API servers in the cluster. \n The following profiles
- are provided: - Default: the existing default policy.
- - WriteRequestBodies: like 'Default', but logs request
- and response HTTP payloads for write requests (create,
- update, patch). - AllRequestBodies: like 'WriteRequestBodies',
- but also logs request and response HTTP payloads for read
- requests (get, list). - None: no requests are logged at
- all, not even oauthaccesstokens and oauthauthorizetokens.
- \n If unset, the 'Default' profile is used as the default."
+ description: |-
+ profile specifies the name of the desired audit policy configuration to be deployed to
+ all OpenShift-provided API servers in the cluster.
+
+ The following profiles are provided:
+ - Default: the existing default policy.
+ - WriteRequestBodies: like 'Default', but logs request and response HTTP payloads for
+ write requests (create, update, patch).
+ - AllRequestBodies: like 'WriteRequestBodies', but also logs request and response
+ HTTP payloads for read requests (get, list).
+ - None: no requests are logged at all, not even oauthaccesstokens and oauthauthorizetokens.
+
+ If unset, the 'Default' profile is used as the default.
enum:
- Default
- WriteRequestBodies
@@ -99,27 +108,28 @@ spec:
x-kubernetes-list-type: map
profile:
default: Default
- description: "profile specifies the name of the desired top-level
- audit profile to be applied to all requests sent to any of the
- OpenShift-provided API servers in the cluster (kube-apiserver,
- openshift-apiserver and oauth-apiserver), with the exception
- of those requests that match one or more of the customRules.
- \n The following profiles are provided: - Default: default policy
- which means MetaData level logging with the exception of events
- (not logged at all), oauthaccesstokens and oauthauthorizetokens
- (both logged at RequestBody level). - WriteRequestBodies: like
- 'Default', but logs request and response HTTP payloads for write
- requests (create, update, patch). - AllRequestBodies: like 'WriteRequestBodies',
- but also logs request and response HTTP payloads for read requests
- (get, list). - None: no requests are logged at all, not even
- oauthaccesstokens and oauthauthorizetokens. \n Warning: It is
- not recommended to disable audit logging by using the `None`
- profile unless you are fully aware of the risks of not logging
- data that can be beneficial when troubleshooting issues. If
- you disable audit logging and a support situation arises, you
- might need to enable audit logging and reproduce the issue in
- order to troubleshoot properly. \n If unset, the 'Default' profile
- is used as the default."
+ description: |-
+ profile specifies the name of the desired top-level audit profile to be applied to all requests
+ sent to any of the OpenShift-provided API servers in the cluster (kube-apiserver,
+ openshift-apiserver and oauth-apiserver), with the exception of those requests that match
+ one or more of the customRules.
+
+ The following profiles are provided:
+ - Default: default policy which means MetaData level logging with the exception of events
+ (not logged at all), oauthaccesstokens and oauthauthorizetokens (both logged at RequestBody
+ level).
+ - WriteRequestBodies: like 'Default', but logs request and response HTTP payloads for
+ write requests (create, update, patch).
+ - AllRequestBodies: like 'WriteRequestBodies', but also logs request and response
+ HTTP payloads for read requests (get, list).
+ - None: no requests are logged at all, not even oauthaccesstokens and oauthauthorizetokens.
+
+ Warning: It is not recommended to disable audit logging by using the `None` profile unless you
+ are fully aware of the risks of not logging data that can be beneficial when troubleshooting issues.
+ If you disable audit logging and a support situation arises, you might need to enable audit logging
+ and reproduce the issue in order to troubleshoot properly.
+
+ If unset, the 'Default' profile is used as the default.
enum:
- Default
- WriteRequestBodies
@@ -128,14 +138,12 @@ spec:
type: string
type: object
clientCA:
- description: 'clientCA references a ConfigMap containing a certificate
- bundle for the signers that will be recognized for incoming client
- certificates in addition to the operator managed signers. If this
- is empty, then only operator managed signers are valid. You usually
- only have to set this if you have your own PKI you wish to honor
- client certificates from. The ConfigMap must exist in the openshift-config
- namespace and contain the following required fields: - ConfigMap.Data["ca-bundle.crt"]
- - CA bundle.'
+ description: |-
+ clientCA references a ConfigMap containing a certificate bundle for the signers that will be recognized for
+ incoming client certificates in addition to the operator managed signers. If this is empty, then only operator managed signers are valid.
+ You usually only have to set this if you have your own PKI you wish to honor client certificates from.
+ The ConfigMap must exist in the openshift-config namespace and contain the following required fields:
+ - ConfigMap.Data["ca-bundle.crt"] - CA bundle.
properties:
name:
description: name is the metadata.name of the referenced config
@@ -149,17 +157,20 @@ spec:
resources at the datastore layer.
properties:
type:
- description: "type defines what encryption type should be used
- to encrypt resources at the datastore layer. When this field
- is unset (i.e. when it is set to the empty string), identity
- is implied. The behavior of unset can and will change over time.
- \ Even if encryption is enabled by default, the meaning of unset
- may change to a different encryption type based on changes in
- best practices. \n When encryption is enabled, all sensitive
- resources shipped with the platform are encrypted. This list
- of sensitive resources can and will change over time. The current
- authoritative list is: \n 1. secrets 2. configmaps 3. routes.route.openshift.io
- 4. oauthaccesstokens.oauth.openshift.io 5. oauthauthorizetokens.oauth.openshift.io"
+ description: |-
+ type defines what encryption type should be used to encrypt resources at the datastore layer.
+ When this field is unset (i.e. when it is set to the empty string), identity is implied.
+ The behavior of unset can and will change over time. Even if encryption is enabled by default,
+ the meaning of unset may change to a different encryption type based on changes in best practices.
+
+ When encryption is enabled, all sensitive resources shipped with the platform are encrypted.
+ This list of sensitive resources can and will change over time. The current authoritative list is:
+
+ 1. secrets
+ 2. configmaps
+ 3. routes.route.openshift.io
+ 4. oauthaccesstokens.oauth.openshift.io
+ 5. oauthauthorizetokens.oauth.openshift.io
enum:
- ""
- identity
@@ -168,37 +179,33 @@ spec:
type: string
type: object
servingCerts:
- description: servingCert is the TLS cert info for serving secure traffic.
- If not specified, operator managed certificates will be used for
- serving secure traffic.
+ description: |-
+ servingCert is the TLS cert info for serving secure traffic. If not specified, operator managed certificates
+ will be used for serving secure traffic.
properties:
namedCertificates:
- description: namedCertificates references secrets containing the
- TLS cert info for serving secure traffic to specific hostnames.
- If no named certificates are provided, or no named certificates
- match the server name as understood by a client, the defaultServingCertificate
- will be used.
+ description: |-
+ namedCertificates references secrets containing the TLS cert info for serving secure traffic to specific hostnames.
+ If no named certificates are provided, or no named certificates match the server name as understood by a client,
+ the defaultServingCertificate will be used.
items:
description: APIServerNamedServingCert maps a server DNS name,
as understood by a client, to a certificate.
properties:
names:
- description: names is a optional list of explicit DNS names
- (leading wildcards allowed) that should use this certificate
- to serve secure traffic. If no names are provided, the
- implicit names will be extracted from the certificates.
- Exact names trump over wildcard names. Explicit names
- defined here trump over extracted implicit names.
+ description: |-
+ names is a optional list of explicit DNS names (leading wildcards allowed) that should use this certificate to
+ serve secure traffic. If no names are provided, the implicit names will be extracted from the certificates.
+ Exact names trump over wildcard names. Explicit names defined here trump over extracted implicit names.
items:
type: string
type: array
servingCertificate:
- description: 'servingCertificate references a kubernetes.io/tls
- type secret containing the TLS cert info for serving secure
- traffic. The secret must exist in the openshift-config
- namespace and contain the following required fields: -
- Secret.Data["tls.key"] - TLS private key. - Secret.Data["tls.crt"]
- - TLS certificate.'
+ description: |-
+ servingCertificate references a kubernetes.io/tls type secret containing the TLS cert info for serving secure traffic.
+ The secret must exist in the openshift-config namespace and contain the following required fields:
+ - Secret.Data["tls.key"] - TLS private key.
+ - Secret.Data["tls.crt"] - TLS certificate.
properties:
name:
description: name is the metadata.name of the referenced
@@ -211,36 +218,53 @@ spec:
type: array
type: object
tlsSecurityProfile:
- description: "tlsSecurityProfile specifies settings for TLS connections
- for externally exposed servers. \n If unset, a default (which may
- change between releases) is chosen. Note that only Old, Intermediate
- and Custom profiles are currently supported, and the maximum available
- minTLSVersion is VersionTLS12."
+ description: |-
+ tlsSecurityProfile specifies settings for TLS connections for externally exposed servers.
+
+ If unset, a default (which may change between releases) is chosen. Note that only Old,
+ Intermediate and Custom profiles are currently supported, and the maximum available
+ minTLSVersion is VersionTLS12.
properties:
custom:
- description: "custom is a user-defined TLS security profile. Be
- extremely careful using a custom profile as invalid configurations
- can be catastrophic. An example custom profile looks like this:
- \n ciphers: \n - ECDHE-ECDSA-CHACHA20-POLY1305 \n - ECDHE-RSA-CHACHA20-POLY1305
- \n - ECDHE-RSA-AES128-GCM-SHA256 \n - ECDHE-ECDSA-AES128-GCM-SHA256
- \n minTLSVersion: VersionTLS11"
+ description: |-
+ custom is a user-defined TLS security profile. Be extremely careful using a custom
+ profile as invalid configurations can be catastrophic. An example custom profile
+ looks like this:
+
+ ciphers:
+
+ - ECDHE-ECDSA-CHACHA20-POLY1305
+
+ - ECDHE-RSA-CHACHA20-POLY1305
+
+ - ECDHE-RSA-AES128-GCM-SHA256
+
+ - ECDHE-ECDSA-AES128-GCM-SHA256
+
+ minTLSVersion: VersionTLS11
nullable: true
properties:
ciphers:
- description: "ciphers is used to specify the cipher algorithms
- that are negotiated during the TLS handshake. Operators
- may remove entries their operands do not support. For example,
- to use DES-CBC3-SHA (yaml): \n ciphers: - DES-CBC3-SHA"
+ description: |-
+ ciphers is used to specify the cipher algorithms that are negotiated
+ during the TLS handshake. Operators may remove entries their operands
+ do not support. For example, to use DES-CBC3-SHA (yaml):
+
+ ciphers:
+ - DES-CBC3-SHA
items:
type: string
type: array
x-kubernetes-list-type: atomic
minTLSVersion:
- description: "minTLSVersion is used to specify the minimal
- version of the TLS protocol that is negotiated during the
- TLS handshake. For example, to use TLS versions 1.1, 1.2
- and 1.3 (yaml): \n minTLSVersion: VersionTLS11 \n NOTE:
- currently the highest minTLSVersion allowed is VersionTLS12"
+ description: |-
+ minTLSVersion is used to specify the minimal version of the TLS protocol
+ that is negotiated during the TLS handshake. For example, to use TLS
+ versions 1.1, 1.2 and 1.3 (yaml):
+
+ minTLSVersion: VersionTLS11
+
+ NOTE: currently the highest minTLSVersion allowed is VersionTLS12
enum:
- VersionTLS10
- VersionTLS11
@@ -249,52 +273,144 @@ spec:
type: string
type: object
intermediate:
- description: "intermediate is a TLS security profile based on:
- \n https://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28recommended.29
- \n and looks like this (yaml): \n ciphers: \n - TLS_AES_128_GCM_SHA256
- \n - TLS_AES_256_GCM_SHA384 \n - TLS_CHACHA20_POLY1305_SHA256
- \n - ECDHE-ECDSA-AES128-GCM-SHA256 \n - ECDHE-RSA-AES128-GCM-SHA256
- \n - ECDHE-ECDSA-AES256-GCM-SHA384 \n - ECDHE-RSA-AES256-GCM-SHA384
- \n - ECDHE-ECDSA-CHACHA20-POLY1305 \n - ECDHE-RSA-CHACHA20-POLY1305
- \n - DHE-RSA-AES128-GCM-SHA256 \n - DHE-RSA-AES256-GCM-SHA384
- \n minTLSVersion: VersionTLS12"
+ description: |-
+ intermediate is a TLS security profile based on:
+
+ https://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28recommended.29
+
+ and looks like this (yaml):
+
+ ciphers:
+
+ - TLS_AES_128_GCM_SHA256
+
+ - TLS_AES_256_GCM_SHA384
+
+ - TLS_CHACHA20_POLY1305_SHA256
+
+ - ECDHE-ECDSA-AES128-GCM-SHA256
+
+ - ECDHE-RSA-AES128-GCM-SHA256
+
+ - ECDHE-ECDSA-AES256-GCM-SHA384
+
+ - ECDHE-RSA-AES256-GCM-SHA384
+
+ - ECDHE-ECDSA-CHACHA20-POLY1305
+
+ - ECDHE-RSA-CHACHA20-POLY1305
+
+ - DHE-RSA-AES128-GCM-SHA256
+
+ - DHE-RSA-AES256-GCM-SHA384
+
+ minTLSVersion: VersionTLS12
nullable: true
type: object
modern:
- description: "modern is a TLS security profile based on: \n https://wiki.mozilla.org/Security/Server_Side_TLS#Modern_compatibility
- \n and looks like this (yaml): \n ciphers: \n - TLS_AES_128_GCM_SHA256
- \n - TLS_AES_256_GCM_SHA384 \n - TLS_CHACHA20_POLY1305_SHA256
- \n minTLSVersion: VersionTLS13"
+ description: |-
+ modern is a TLS security profile based on:
+
+ https://wiki.mozilla.org/Security/Server_Side_TLS#Modern_compatibility
+
+ and looks like this (yaml):
+
+ ciphers:
+
+ - TLS_AES_128_GCM_SHA256
+
+ - TLS_AES_256_GCM_SHA384
+
+ - TLS_CHACHA20_POLY1305_SHA256
+
+ minTLSVersion: VersionTLS13
nullable: true
type: object
old:
- description: "old is a TLS security profile based on: \n https://wiki.mozilla.org/Security/Server_Side_TLS#Old_backward_compatibility
- \n and looks like this (yaml): \n ciphers: \n - TLS_AES_128_GCM_SHA256
- \n - TLS_AES_256_GCM_SHA384 \n - TLS_CHACHA20_POLY1305_SHA256
- \n - ECDHE-ECDSA-AES128-GCM-SHA256 \n - ECDHE-RSA-AES128-GCM-SHA256
- \n - ECDHE-ECDSA-AES256-GCM-SHA384 \n - ECDHE-RSA-AES256-GCM-SHA384
- \n - ECDHE-ECDSA-CHACHA20-POLY1305 \n - ECDHE-RSA-CHACHA20-POLY1305
- \n - DHE-RSA-AES128-GCM-SHA256 \n - DHE-RSA-AES256-GCM-SHA384
- \n - DHE-RSA-CHACHA20-POLY1305 \n - ECDHE-ECDSA-AES128-SHA256
- \n - ECDHE-RSA-AES128-SHA256 \n - ECDHE-ECDSA-AES128-SHA \n
- - ECDHE-RSA-AES128-SHA \n - ECDHE-ECDSA-AES256-SHA384 \n - ECDHE-RSA-AES256-SHA384
- \n - ECDHE-ECDSA-AES256-SHA \n - ECDHE-RSA-AES256-SHA \n - DHE-RSA-AES128-SHA256
- \n - DHE-RSA-AES256-SHA256 \n - AES128-GCM-SHA256 \n - AES256-GCM-SHA384
- \n - AES128-SHA256 \n - AES256-SHA256 \n - AES128-SHA \n - AES256-SHA
- \n - DES-CBC3-SHA \n minTLSVersion: VersionTLS10"
+ description: |-
+ old is a TLS security profile based on:
+
+ https://wiki.mozilla.org/Security/Server_Side_TLS#Old_backward_compatibility
+
+ and looks like this (yaml):
+
+ ciphers:
+
+ - TLS_AES_128_GCM_SHA256
+
+ - TLS_AES_256_GCM_SHA384
+
+ - TLS_CHACHA20_POLY1305_SHA256
+
+ - ECDHE-ECDSA-AES128-GCM-SHA256
+
+ - ECDHE-RSA-AES128-GCM-SHA256
+
+ - ECDHE-ECDSA-AES256-GCM-SHA384
+
+ - ECDHE-RSA-AES256-GCM-SHA384
+
+ - ECDHE-ECDSA-CHACHA20-POLY1305
+
+ - ECDHE-RSA-CHACHA20-POLY1305
+
+ - DHE-RSA-AES128-GCM-SHA256
+
+ - DHE-RSA-AES256-GCM-SHA384
+
+ - DHE-RSA-CHACHA20-POLY1305
+
+ - ECDHE-ECDSA-AES128-SHA256
+
+ - ECDHE-RSA-AES128-SHA256
+
+ - ECDHE-ECDSA-AES128-SHA
+
+ - ECDHE-RSA-AES128-SHA
+
+ - ECDHE-ECDSA-AES256-SHA384
+
+ - ECDHE-RSA-AES256-SHA384
+
+ - ECDHE-ECDSA-AES256-SHA
+
+ - ECDHE-RSA-AES256-SHA
+
+ - DHE-RSA-AES128-SHA256
+
+ - DHE-RSA-AES256-SHA256
+
+ - AES128-GCM-SHA256
+
+ - AES256-GCM-SHA384
+
+ - AES128-SHA256
+
+ - AES256-SHA256
+
+ - AES128-SHA
+
+ - AES256-SHA
+
+ - DES-CBC3-SHA
+
+ minTLSVersion: VersionTLS10
nullable: true
type: object
type:
- description: "type is one of Old, Intermediate, Modern or Custom.
- Custom provides the ability to specify individual TLS security
- profile parameters. Old, Intermediate and Modern are TLS security
- profiles based on: \n https://wiki.mozilla.org/Security/Server_Side_TLS#Recommended_configurations
- \n The profiles are intent based, so they may change over time
- as new ciphers are developed and existing ciphers are found
- to be insecure. Depending on precisely which ciphers are available
- to a process, the list may be reduced. \n Note that the Modern
- profile is currently not supported because it is not yet well
- adopted by common software libraries."
+ description: |-
+ type is one of Old, Intermediate, Modern or Custom. Custom provides
+ the ability to specify individual TLS security profile parameters.
+ Old, Intermediate and Modern are TLS security profiles based on:
+
+ https://wiki.mozilla.org/Security/Server_Side_TLS#Recommended_configurations
+
+ The profiles are intent based, so they may change over time as new ciphers are developed and existing ciphers
+ are found to be insecure. Depending on precisely which ciphers are available to a process, the list may be
+ reduced.
+
+ Note that the Modern profile is currently not supported because it is not
+ yet well adopted by common software libraries.
enum:
- Old
- Intermediate
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-Hypershift.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-Hypershift.crd.yaml
index 1d3ed5bca04b66a6968a1cd8632f106e5ca0a888..8f7dc33442cf8b65855516d9289c327701f91d8b 100644
--- a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-Hypershift.crd.yaml
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-Hypershift.crd.yaml
@@ -19,20 +19,26 @@ spec:
- name: v1
schema:
openAPIV3Schema:
- description: "Authentication specifies cluster-wide settings for authentication
- (like OAuth and webhook token authenticators). The canonical name of an
- instance is `cluster`. \n Compatibility level 1: Stable within a major release
- for a minimum of 12 months or 3 minor releases (whichever is longer)."
+ description: |-
+ Authentication specifies cluster-wide settings for authentication (like OAuth and
+ webhook token authenticators). The canonical name of an instance is `cluster`.
+
+ Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -40,17 +46,19 @@ spec:
description: spec holds user settable values for configuration
properties:
oauthMetadata:
- description: 'oauthMetadata contains the discovery endpoint data for
- OAuth 2.0 Authorization Server Metadata for an external OAuth server.
+ description: |-
+ oauthMetadata contains the discovery endpoint data for OAuth 2.0
+ Authorization Server Metadata for an external OAuth server.
This discovery document can be viewed from its served location:
- oc get --raw ''/.well-known/oauth-authorization-server'' For further
- details, see the IETF Draft: https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2
- If oauthMetadata.name is non-empty, this value has precedence over
- any metadata reference stored in status. The key "oauthMetadata"
- is used to locate the data. If specified and the config map or expected
- key is not found, no metadata is served. If the specified metadata
- is not valid, no metadata is served. The namespace for this config
- map is openshift-config.'
+ oc get --raw '/.well-known/oauth-authorization-server'
+ For further details, see the IETF Draft:
+ https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2
+ If oauthMetadata.name is non-empty, this value has precedence
+ over any metadata reference stored in status.
+ The key "oauthMetadata" is used to locate the data.
+ If specified and the config map or expected key is not found, no metadata is served.
+ If the specified metadata is not valid, no metadata is served.
+ The namespace for this config map is openshift-config.
properties:
name:
description: name is the metadata.name of the referenced config
@@ -60,40 +68,49 @@ spec:
- name
type: object
oidcProviders:
- description: "OIDCProviders are OIDC identity providers that can issue
- tokens for this cluster Can only be set if \"Type\" is set to \"OIDC\".
- \n At most one provider can be configured."
+ description: |-
+ OIDCProviders are OIDC identity providers that can issue tokens
+ for this cluster
+ Can only be set if "Type" is set to "OIDC".
+
+ At most one provider can be configured.
items:
properties:
claimMappings:
- description: ClaimMappings describes rules on how to transform
- information from an ID token into a cluster identity
+ description: |-
+ ClaimMappings describes rules on how to transform information from an
+ ID token into a cluster identity
properties:
groups:
- description: Groups is a name of the claim that should be
- used to construct groups for the cluster identity. The
- referenced claim must use array of strings values.
+ description: |-
+ Groups is a name of the claim that should be used to construct
+ groups for the cluster identity.
+ The referenced claim must use array of strings values.
properties:
claim:
description: Claim is a JWT token claim to be used in
the mapping
type: string
prefix:
- description: "Prefix is a string to prefix the value
- from the token in the result of the claim mapping.
- \n By default, no prefixing occurs. \n Example: if
- `prefix` is set to \"myoidc:\"\" and the `claim` in
- JWT contains an array of strings \"a\", \"b\" and
- \ \"c\", the mapping will result in an array of string
- \"myoidc:a\", \"myoidc:b\" and \"myoidc:c\"."
+ description: |-
+ Prefix is a string to prefix the value from the token in the result of the
+ claim mapping.
+
+ By default, no prefixing occurs.
+
+ Example: if `prefix` is set to "myoidc:"" and the `claim` in JWT contains
+ an array of strings "a", "b" and "c", the mapping will result in an
+ array of string "myoidc:a", "myoidc:b" and "myoidc:c".
type: string
required:
- claim
type: object
username:
- description: "Username is a name of the claim that should
- be used to construct usernames for the cluster identity.
- \n Default value: \"sub\""
+ description: |-
+ Username is a name of the claim that should be used to construct
+ usernames for the cluster identity.
+
+ Default value: "sub"
properties:
claim:
description: Claim is a JWT token claim to be used in
@@ -108,23 +125,26 @@ spec:
- prefixString
type: object
prefixPolicy:
- description: "PrefixPolicy specifies how a prefix should
- apply. \n By default, claims other than `email` will
- be prefixed with the issuer URL to prevent naming
- clashes with other plugins. \n Set to \"NoPrefix\"
- to disable prefixing. \n Example: (1) `prefix` is
- set to \"myoidc:\" and `claim` is set to \"username\".
- If the JWT claim `username` contains value `userA`,
- the resulting mapped value will be \"myoidc:userA\".
- (2) `prefix` is set to \"myoidc:\" and `claim` is
- set to \"email\". If the JWT `email` claim contains
- value \"userA@myoidc.tld\", the resulting mapped value
- will be \"myoidc:userA@myoidc.tld\". (3) `prefix`
- is unset, `issuerURL` is set to `https://myoidc.tld`,
- the JWT claims include \"username\":\"userA\" and
- \"email\":\"userA@myoidc.tld\", and `claim` is set
- to: (a) \"username\": the mapped value will be \"https://myoidc.tld#userA\"
- (b) \"email\": the mapped value will be \"userA@myoidc.tld\""
+ description: |-
+ PrefixPolicy specifies how a prefix should apply.
+
+ By default, claims other than `email` will be prefixed with the issuer URL to
+ prevent naming clashes with other plugins.
+
+ Set to "NoPrefix" to disable prefixing.
+
+ Example:
+ (1) `prefix` is set to "myoidc:" and `claim` is set to "username".
+ If the JWT claim `username` contains value `userA`, the resulting
+ mapped value will be "myoidc:userA".
+ (2) `prefix` is set to "myoidc:" and `claim` is set to "email". If the
+ JWT `email` claim contains value "userA@myoidc.tld", the resulting
+ mapped value will be "myoidc:userA@myoidc.tld".
+ (3) `prefix` is unset, `issuerURL` is set to `https://myoidc.tld`,
+ the JWT claims include "username":"userA" and "email":"userA@myoidc.tld",
+ and `claim` is set to:
+ (a) "username": the mapped value will be "https://myoidc.tld#userA"
+ (b) "email": the mapped value will be "userA@myoidc.tld"
enum:
- ""
- NoPrefix
@@ -146,12 +166,14 @@ spec:
items:
properties:
requiredClaim:
- description: RequiredClaim allows configuring a required
- claim name and its expected value
+ description: |-
+ RequiredClaim allows configuring a required claim name and its expected
+ value
properties:
claim:
- description: Claim is a name of a required claim.
- Only claims with string values are supported.
+ description: |-
+ Claim is a name of a required claim. Only claims with string values are
+ supported.
minLength: 1
type: string
requiredValue:
@@ -176,10 +198,11 @@ spec:
description: Issuer describes atributes of the OIDC token issuer
properties:
audiences:
- description: Audiences is an array of audiences that the
- token was issued for. Valid tokens must include at least
- one of these values in their "aud" claim. Must be set
- to exactly one value.
+ description: |-
+ Audiences is an array of audiences that the token was issued for.
+ Valid tokens must include at least one of these values in their
+ "aud" claim.
+ Must be set to exactly one value.
items:
minLength: 1
type: string
@@ -188,10 +211,11 @@ spec:
type: array
x-kubernetes-list-type: set
issuerCertificateAuthority:
- description: CertificateAuthority is a reference to a config
- map in the configuration namespace. The .data of the configMap
- must contain the "ca-bundle.crt" key. If unset, system
- trust is used instead.
+ description: |-
+ CertificateAuthority is a reference to a config map in the
+ configuration namespace. The .data of the configMap must contain
+ the "ca-bundle.crt" key.
+ If unset, system trust is used instead.
properties:
name:
description: name is the metadata.name of the referenced
@@ -201,7 +225,8 @@ spec:
- name
type: object
issuerURL:
- description: URL is the serving URL of the token issuer.
+ description: |-
+ URL is the serving URL of the token issuer.
Must use the https:// scheme.
pattern: ^https:\/\/[^\s]
type: string
@@ -214,8 +239,9 @@ spec:
minLength: 1
type: string
oidcClients:
- description: OIDCClients contains configuration for the platform's
- clients that need to request tokens from the issuer
+ description: |-
+ OIDCClients contains configuration for the platform's clients that
+ need to request tokens from the issuer
items:
properties:
clientID:
@@ -224,9 +250,9 @@ spec:
minLength: 1
type: string
clientSecret:
- description: ClientSecret refers to a secret in the `openshift-config`
- namespace that contains the client secret in the `clientSecret`
- key of the `.data` field
+ description: |-
+ ClientSecret refers to a secret in the `openshift-config` namespace that
+ contains the client secret in the `clientSecret` key of the `.data` field
properties:
name:
description: name is the metadata.name of the referenced
@@ -236,14 +262,16 @@ spec:
- name
type: object
componentName:
- description: ComponentName is the name of the component
- that is supposed to consume this client configuration
+ description: |-
+ ComponentName is the name of the component that is supposed to consume this
+ client configuration
maxLength: 256
minLength: 1
type: string
componentNamespace:
- description: ComponentNamespace is the namespace of the
- component that is supposed to consume this client configuration
+ description: |-
+ ComponentNamespace is the namespace of the component that is supposed to consume this
+ client configuration
maxLength: 63
minLength: 1
type: string
@@ -275,20 +303,21 @@ spec:
- name
x-kubernetes-list-type: map
serviceAccountIssuer:
- description: 'serviceAccountIssuer is the identifier of the bound
- service account token issuer. The default is https://kubernetes.default.svc
- WARNING: Updating this field will not result in immediate invalidation
- of all bound tokens with the previous issuer value. Instead, the
- tokens issued by previous service account issuer will continue to
- be trusted for a time period chosen by the platform (currently set
- to 24h). This time period is subject to change over time. This allows
- internal components to transition to use new service account issuer
- without service distruption.'
+ description: |-
+ serviceAccountIssuer is the identifier of the bound service account token
+ issuer.
+ The default is https://kubernetes.default.svc
+ WARNING: Updating this field will not result in immediate invalidation of all bound tokens with the
+ previous issuer value. Instead, the tokens issued by previous service account issuer will continue to
+ be trusted for a time period chosen by the platform (currently set to 24h).
+ This time period is subject to change over time.
+ This allows internal components to transition to use new service account issuer without service distruption.
type: string
type:
- description: type identifies the cluster managed, user facing authentication
- mode in use. Specifically, it manages the component that responds
- to login attempts. The default is IntegratedOAuth.
+ description: |-
+ type identifies the cluster managed, user facing authentication mode in use.
+ Specifically, it manages the component that responds to login attempts.
+ The default is IntegratedOAuth.
enum:
- ""
- None
@@ -296,22 +325,27 @@ spec:
- OIDC
type: string
webhookTokenAuthenticator:
- description: "webhookTokenAuthenticator configures a remote token
- reviewer. These remote authentication webhooks can be used to verify
- bearer tokens via the tokenreviews.authentication.k8s.io REST API.
- This is required to honor bearer tokens that are provisioned by
- an external authentication service. \n Can only be set if \"Type\"
- is set to \"None\"."
+ description: |-
+ webhookTokenAuthenticator configures a remote token reviewer.
+ These remote authentication webhooks can be used to verify bearer tokens
+ via the tokenreviews.authentication.k8s.io REST API. This is required to
+ honor bearer tokens that are provisioned by an external authentication service.
+
+ Can only be set if "Type" is set to "None".
properties:
kubeConfig:
- description: "kubeConfig references a secret that contains kube
- config file data which describes how to access the remote webhook
- service. The namespace for the referenced secret is openshift-config.
- \n For further details, see: \n https://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication
- \n The key \"kubeConfig\" is used to locate the data. If the
- secret or expected key is not found, the webhook is not honored.
- If the specified kube config data is not valid, the webhook
- is not honored."
+ description: |-
+ kubeConfig references a secret that contains kube config file data which
+ describes how to access the remote webhook service.
+ The namespace for the referenced secret is openshift-config.
+
+ For further details, see:
+
+ https://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication
+
+ The key "kubeConfig" is used to locate the data.
+ If the secret or expected key is not found, the webhook is not honored.
+ If the specified kube config data is not valid, the webhook is not honored.
properties:
name:
description: name is the metadata.name of the referenced secret
@@ -326,20 +360,19 @@ spec:
description: webhookTokenAuthenticators is DEPRECATED, setting it
has no effect.
items:
- description: deprecatedWebhookTokenAuthenticator holds the necessary
- configuration options for a remote token authenticator. It's the
- same as WebhookTokenAuthenticator but it's missing the 'required'
- validation on KubeConfig field.
+ description: |-
+ deprecatedWebhookTokenAuthenticator holds the necessary configuration options for a remote token authenticator.
+ It's the same as WebhookTokenAuthenticator but it's missing the 'required' validation on KubeConfig field.
properties:
kubeConfig:
- description: 'kubeConfig contains kube config file data which
- describes how to access the remote webhook service. For further
- details, see: https://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication
- The key "kubeConfig" is used to locate the data. If the secret
- or expected key is not found, the webhook is not honored.
- If the specified kube config data is not valid, the webhook
- is not honored. The namespace for this secret is determined
- by the point of use.'
+ description: |-
+ kubeConfig contains kube config file data which describes how to access the remote webhook service.
+ For further details, see:
+ https://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication
+ The key "kubeConfig" is used to locate the data.
+ If the secret or expected key is not found, the webhook is not honored.
+ If the specified kube config data is not valid, the webhook is not honored.
+ The namespace for this secret is determined by the point of use.
properties:
name:
description: name is the metadata.name of the referenced
@@ -357,18 +390,20 @@ spec:
be overridden.
properties:
integratedOAuthMetadata:
- description: 'integratedOAuthMetadata contains the discovery endpoint
- data for OAuth 2.0 Authorization Server Metadata for the in-cluster
- integrated OAuth server. This discovery document can be viewed from
- its served location: oc get --raw ''/.well-known/oauth-authorization-server''
- For further details, see the IETF Draft: https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2
- This contains the observed value based on cluster state. An explicitly
- set value in spec.oauthMetadata has precedence over this field.
- This field has no meaning if authentication spec.type is not set
- to IntegratedOAuth. The key "oauthMetadata" is used to locate the
- data. If the config map or expected key is not found, no metadata
- is served. If the specified metadata is not valid, no metadata is
- served. The namespace for this config map is openshift-config-managed.'
+ description: |-
+ integratedOAuthMetadata contains the discovery endpoint data for OAuth 2.0
+ Authorization Server Metadata for the in-cluster integrated OAuth server.
+ This discovery document can be viewed from its served location:
+ oc get --raw '/.well-known/oauth-authorization-server'
+ For further details, see the IETF Draft:
+ https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2
+ This contains the observed value based on cluster state.
+ An explicitly set value in spec.oauthMetadata has precedence over this field.
+ This field has no meaning if authentication spec.type is not set to IntegratedOAuth.
+ The key "oauthMetadata" is used to locate the data.
+ If the config map or expected key is not found, no metadata is served.
+ If the specified metadata is not valid, no metadata is served.
+ The namespace for this config map is openshift-config-managed.
properties:
name:
description: name is the metadata.name of the referenced config
@@ -378,9 +413,9 @@ spec:
- name
type: object
oidcClients:
- description: OIDCClients is where participating operators place the
- current OIDC client status for OIDC clients that can be customized
- by the cluster-admin.
+ description: |-
+ OIDCClients is where participating operators place the current OIDC client status
+ for OIDC clients that can be customized by the cluster-admin.
items:
properties:
componentName:
@@ -396,56 +431,45 @@ spec:
minLength: 1
type: string
conditions:
- description: "Conditions are used to communicate the state of
- the `oidcClients` entry. \n Supported conditions include Available,
- Degraded and Progressing. \n If Available is true, the component
- is successfully using the configured client. If Degraded is
- true, that means something has gone wrong trying to handle
- the client configuration. If Progressing is true, that means
- the component is taking some action related to the `oidcClients`
- entry."
+ description: |-
+ Conditions are used to communicate the state of the `oidcClients` entry.
+
+ Supported conditions include Available, Degraded and Progressing.
+
+ If Available is true, the component is successfully using the configured client.
+ If Degraded is true, that means something has gone wrong trying to handle the client configuration.
+ If Progressing is true, that means the component is taking some action related to the `oidcClients` entry.
items:
- description: "Condition contains details for one aspect of
- the current state of this API Resource. --- This struct
- is intended for direct use as an array at the field path
- .status.conditions. For example, \n type FooStatus struct{
- // Represents the observations of a foo's current state.
- // Known .status.conditions.type are: \"Available\", \"Progressing\",
- and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge
- // +listType=map // +listMapKey=type Conditions []metav1.Condition
- `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\"
- protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields
- }"
+ description: Condition contains details for one aspect of
+ the current state of this API Resource.
properties:
lastTransitionTime:
- description: lastTransitionTime is the last time the condition
- transitioned from one status to another. This should
- be when the underlying condition changed. If that is
- not known, then using the time when the API field changed
- is acceptable.
+ description: |-
+ lastTransitionTime is the last time the condition transitioned from one status to another.
+ This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.
format: date-time
type: string
message:
- description: message is a human readable message indicating
- details about the transition. This may be an empty string.
+ description: |-
+ message is a human readable message indicating details about the transition.
+ This may be an empty string.
maxLength: 32768
type: string
observedGeneration:
- description: observedGeneration represents the .metadata.generation
- that the condition was set based upon. For instance,
- if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration
- is 9, the condition is out of date with respect to the
- current state of the instance.
+ description: |-
+ observedGeneration represents the .metadata.generation that the condition was set based upon.
+ For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
+ with respect to the current state of the instance.
format: int64
minimum: 0
type: integer
reason:
- description: reason contains a programmatic identifier
- indicating the reason for the condition's last transition.
- Producers of specific condition types may define expected
- values and meanings for this field, and whether the
- values are considered a guaranteed API. The value should
- be a CamelCase string. This field may not be empty.
+ description: |-
+ reason contains a programmatic identifier indicating the reason for the condition's last transition.
+ Producers of specific condition types may define expected values and meanings for this field,
+ and whether the values are considered a guaranteed API.
+ The value should be a CamelCase string.
+ This field may not be empty.
maxLength: 1024
minLength: 1
pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
@@ -460,11 +484,6 @@ spec:
type: string
type:
description: type of condition in CamelCase or in foo.example.com/CamelCase.
- --- Many .condition.type values are consistent across
- resources like Available, but because arbitrary conditions
- can be useful (see .node.status.conditions), the ability
- to deconflict is important. The regex it matches is
- (dns1123SubdomainFmt/)?(qualifiedNameFmt)
maxLength: 316
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
@@ -480,8 +499,9 @@ spec:
- type
x-kubernetes-list-type: map
consumingUsers:
- description: ConsumingUsers is a slice of ServiceAccounts that
- need to have read permission on the `clientSecret` secret.
+ description: |-
+ ConsumingUsers is a slice of ServiceAccounts that need to have read
+ permission on the `clientSecret` secret.
items:
description: ConsumingUser is an alias for string which we
add validation to. Currently only service accounts are supported.
@@ -503,7 +523,8 @@ spec:
minLength: 1
type: string
issuerURL:
- description: URL is the serving URL of the token issuer.
+ description: |-
+ URL is the serving URL of the token issuer.
Must use the https:// scheme.
pattern: ^https:\/\/[^\s]
type: string
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-SelfManagedHA-CustomNoUpgrade.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-SelfManagedHA-CustomNoUpgrade.crd.yaml
index e6268ff973d102b3f3c386af8c431c27d337bb37..9d7058b463ac39914dd64230f4f033facfb4d017 100644
--- a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-SelfManagedHA-CustomNoUpgrade.crd.yaml
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-SelfManagedHA-CustomNoUpgrade.crd.yaml
@@ -20,20 +20,26 @@ spec:
- name: v1
schema:
openAPIV3Schema:
- description: "Authentication specifies cluster-wide settings for authentication
- (like OAuth and webhook token authenticators). The canonical name of an
- instance is `cluster`. \n Compatibility level 1: Stable within a major release
- for a minimum of 12 months or 3 minor releases (whichever is longer)."
+ description: |-
+ Authentication specifies cluster-wide settings for authentication (like OAuth and
+ webhook token authenticators). The canonical name of an instance is `cluster`.
+
+ Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -41,17 +47,19 @@ spec:
description: spec holds user settable values for configuration
properties:
oauthMetadata:
- description: 'oauthMetadata contains the discovery endpoint data for
- OAuth 2.0 Authorization Server Metadata for an external OAuth server.
+ description: |-
+ oauthMetadata contains the discovery endpoint data for OAuth 2.0
+ Authorization Server Metadata for an external OAuth server.
This discovery document can be viewed from its served location:
- oc get --raw ''/.well-known/oauth-authorization-server'' For further
- details, see the IETF Draft: https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2
- If oauthMetadata.name is non-empty, this value has precedence over
- any metadata reference stored in status. The key "oauthMetadata"
- is used to locate the data. If specified and the config map or expected
- key is not found, no metadata is served. If the specified metadata
- is not valid, no metadata is served. The namespace for this config
- map is openshift-config.'
+ oc get --raw '/.well-known/oauth-authorization-server'
+ For further details, see the IETF Draft:
+ https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2
+ If oauthMetadata.name is non-empty, this value has precedence
+ over any metadata reference stored in status.
+ The key "oauthMetadata" is used to locate the data.
+ If specified and the config map or expected key is not found, no metadata is served.
+ If the specified metadata is not valid, no metadata is served.
+ The namespace for this config map is openshift-config.
properties:
name:
description: name is the metadata.name of the referenced config
@@ -61,40 +69,49 @@ spec:
- name
type: object
oidcProviders:
- description: "OIDCProviders are OIDC identity providers that can issue
- tokens for this cluster Can only be set if \"Type\" is set to \"OIDC\".
- \n At most one provider can be configured."
+ description: |-
+ OIDCProviders are OIDC identity providers that can issue tokens
+ for this cluster
+ Can only be set if "Type" is set to "OIDC".
+
+ At most one provider can be configured.
items:
properties:
claimMappings:
- description: ClaimMappings describes rules on how to transform
- information from an ID token into a cluster identity
+ description: |-
+ ClaimMappings describes rules on how to transform information from an
+ ID token into a cluster identity
properties:
groups:
- description: Groups is a name of the claim that should be
- used to construct groups for the cluster identity. The
- referenced claim must use array of strings values.
+ description: |-
+ Groups is a name of the claim that should be used to construct
+ groups for the cluster identity.
+ The referenced claim must use array of strings values.
properties:
claim:
description: Claim is a JWT token claim to be used in
the mapping
type: string
prefix:
- description: "Prefix is a string to prefix the value
- from the token in the result of the claim mapping.
- \n By default, no prefixing occurs. \n Example: if
- `prefix` is set to \"myoidc:\"\" and the `claim` in
- JWT contains an array of strings \"a\", \"b\" and
- \ \"c\", the mapping will result in an array of string
- \"myoidc:a\", \"myoidc:b\" and \"myoidc:c\"."
+ description: |-
+ Prefix is a string to prefix the value from the token in the result of the
+ claim mapping.
+
+ By default, no prefixing occurs.
+
+ Example: if `prefix` is set to "myoidc:"" and the `claim` in JWT contains
+ an array of strings "a", "b" and "c", the mapping will result in an
+ array of string "myoidc:a", "myoidc:b" and "myoidc:c".
type: string
required:
- claim
type: object
username:
- description: "Username is a name of the claim that should
- be used to construct usernames for the cluster identity.
- \n Default value: \"sub\""
+ description: |-
+ Username is a name of the claim that should be used to construct
+ usernames for the cluster identity.
+
+ Default value: "sub"
properties:
claim:
description: Claim is a JWT token claim to be used in
@@ -109,23 +126,26 @@ spec:
- prefixString
type: object
prefixPolicy:
- description: "PrefixPolicy specifies how a prefix should
- apply. \n By default, claims other than `email` will
- be prefixed with the issuer URL to prevent naming
- clashes with other plugins. \n Set to \"NoPrefix\"
- to disable prefixing. \n Example: (1) `prefix` is
- set to \"myoidc:\" and `claim` is set to \"username\".
- If the JWT claim `username` contains value `userA`,
- the resulting mapped value will be \"myoidc:userA\".
- (2) `prefix` is set to \"myoidc:\" and `claim` is
- set to \"email\". If the JWT `email` claim contains
- value \"userA@myoidc.tld\", the resulting mapped value
- will be \"myoidc:userA@myoidc.tld\". (3) `prefix`
- is unset, `issuerURL` is set to `https://myoidc.tld`,
- the JWT claims include \"username\":\"userA\" and
- \"email\":\"userA@myoidc.tld\", and `claim` is set
- to: (a) \"username\": the mapped value will be \"https://myoidc.tld#userA\"
- (b) \"email\": the mapped value will be \"userA@myoidc.tld\""
+ description: |-
+ PrefixPolicy specifies how a prefix should apply.
+
+ By default, claims other than `email` will be prefixed with the issuer URL to
+ prevent naming clashes with other plugins.
+
+ Set to "NoPrefix" to disable prefixing.
+
+ Example:
+ (1) `prefix` is set to "myoidc:" and `claim` is set to "username".
+ If the JWT claim `username` contains value `userA`, the resulting
+ mapped value will be "myoidc:userA".
+ (2) `prefix` is set to "myoidc:" and `claim` is set to "email". If the
+ JWT `email` claim contains value "userA@myoidc.tld", the resulting
+ mapped value will be "myoidc:userA@myoidc.tld".
+ (3) `prefix` is unset, `issuerURL` is set to `https://myoidc.tld`,
+ the JWT claims include "username":"userA" and "email":"userA@myoidc.tld",
+ and `claim` is set to:
+ (a) "username": the mapped value will be "https://myoidc.tld#userA"
+ (b) "email": the mapped value will be "userA@myoidc.tld"
enum:
- ""
- NoPrefix
@@ -147,12 +167,14 @@ spec:
items:
properties:
requiredClaim:
- description: RequiredClaim allows configuring a required
- claim name and its expected value
+ description: |-
+ RequiredClaim allows configuring a required claim name and its expected
+ value
properties:
claim:
- description: Claim is a name of a required claim.
- Only claims with string values are supported.
+ description: |-
+ Claim is a name of a required claim. Only claims with string values are
+ supported.
minLength: 1
type: string
requiredValue:
@@ -177,10 +199,11 @@ spec:
description: Issuer describes atributes of the OIDC token issuer
properties:
audiences:
- description: Audiences is an array of audiences that the
- token was issued for. Valid tokens must include at least
- one of these values in their "aud" claim. Must be set
- to exactly one value.
+ description: |-
+ Audiences is an array of audiences that the token was issued for.
+ Valid tokens must include at least one of these values in their
+ "aud" claim.
+ Must be set to exactly one value.
items:
minLength: 1
type: string
@@ -189,10 +212,11 @@ spec:
type: array
x-kubernetes-list-type: set
issuerCertificateAuthority:
- description: CertificateAuthority is a reference to a config
- map in the configuration namespace. The .data of the configMap
- must contain the "ca-bundle.crt" key. If unset, system
- trust is used instead.
+ description: |-
+ CertificateAuthority is a reference to a config map in the
+ configuration namespace. The .data of the configMap must contain
+ the "ca-bundle.crt" key.
+ If unset, system trust is used instead.
properties:
name:
description: name is the metadata.name of the referenced
@@ -202,7 +226,8 @@ spec:
- name
type: object
issuerURL:
- description: URL is the serving URL of the token issuer.
+ description: |-
+ URL is the serving URL of the token issuer.
Must use the https:// scheme.
pattern: ^https:\/\/[^\s]
type: string
@@ -215,8 +240,9 @@ spec:
minLength: 1
type: string
oidcClients:
- description: OIDCClients contains configuration for the platform's
- clients that need to request tokens from the issuer
+ description: |-
+ OIDCClients contains configuration for the platform's clients that
+ need to request tokens from the issuer
items:
properties:
clientID:
@@ -225,9 +251,9 @@ spec:
minLength: 1
type: string
clientSecret:
- description: ClientSecret refers to a secret in the `openshift-config`
- namespace that contains the client secret in the `clientSecret`
- key of the `.data` field
+ description: |-
+ ClientSecret refers to a secret in the `openshift-config` namespace that
+ contains the client secret in the `clientSecret` key of the `.data` field
properties:
name:
description: name is the metadata.name of the referenced
@@ -237,14 +263,16 @@ spec:
- name
type: object
componentName:
- description: ComponentName is the name of the component
- that is supposed to consume this client configuration
+ description: |-
+ ComponentName is the name of the component that is supposed to consume this
+ client configuration
maxLength: 256
minLength: 1
type: string
componentNamespace:
- description: ComponentNamespace is the namespace of the
- component that is supposed to consume this client configuration
+ description: |-
+ ComponentNamespace is the namespace of the component that is supposed to consume this
+ client configuration
maxLength: 63
minLength: 1
type: string
@@ -276,20 +304,21 @@ spec:
- name
x-kubernetes-list-type: map
serviceAccountIssuer:
- description: 'serviceAccountIssuer is the identifier of the bound
- service account token issuer. The default is https://kubernetes.default.svc
- WARNING: Updating this field will not result in immediate invalidation
- of all bound tokens with the previous issuer value. Instead, the
- tokens issued by previous service account issuer will continue to
- be trusted for a time period chosen by the platform (currently set
- to 24h). This time period is subject to change over time. This allows
- internal components to transition to use new service account issuer
- without service distruption.'
+ description: |-
+ serviceAccountIssuer is the identifier of the bound service account token
+ issuer.
+ The default is https://kubernetes.default.svc
+ WARNING: Updating this field will not result in immediate invalidation of all bound tokens with the
+ previous issuer value. Instead, the tokens issued by previous service account issuer will continue to
+ be trusted for a time period chosen by the platform (currently set to 24h).
+ This time period is subject to change over time.
+ This allows internal components to transition to use new service account issuer without service distruption.
type: string
type:
- description: type identifies the cluster managed, user facing authentication
- mode in use. Specifically, it manages the component that responds
- to login attempts. The default is IntegratedOAuth.
+ description: |-
+ type identifies the cluster managed, user facing authentication mode in use.
+ Specifically, it manages the component that responds to login attempts.
+ The default is IntegratedOAuth.
enum:
- ""
- None
@@ -297,22 +326,27 @@ spec:
- OIDC
type: string
webhookTokenAuthenticator:
- description: "webhookTokenAuthenticator configures a remote token
- reviewer. These remote authentication webhooks can be used to verify
- bearer tokens via the tokenreviews.authentication.k8s.io REST API.
- This is required to honor bearer tokens that are provisioned by
- an external authentication service. \n Can only be set if \"Type\"
- is set to \"None\"."
+ description: |-
+ webhookTokenAuthenticator configures a remote token reviewer.
+ These remote authentication webhooks can be used to verify bearer tokens
+ via the tokenreviews.authentication.k8s.io REST API. This is required to
+ honor bearer tokens that are provisioned by an external authentication service.
+
+ Can only be set if "Type" is set to "None".
properties:
kubeConfig:
- description: "kubeConfig references a secret that contains kube
- config file data which describes how to access the remote webhook
- service. The namespace for the referenced secret is openshift-config.
- \n For further details, see: \n https://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication
- \n The key \"kubeConfig\" is used to locate the data. If the
- secret or expected key is not found, the webhook is not honored.
- If the specified kube config data is not valid, the webhook
- is not honored."
+ description: |-
+ kubeConfig references a secret that contains kube config file data which
+ describes how to access the remote webhook service.
+ The namespace for the referenced secret is openshift-config.
+
+ For further details, see:
+
+ https://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication
+
+ The key "kubeConfig" is used to locate the data.
+ If the secret or expected key is not found, the webhook is not honored.
+ If the specified kube config data is not valid, the webhook is not honored.
properties:
name:
description: name is the metadata.name of the referenced secret
@@ -327,20 +361,19 @@ spec:
description: webhookTokenAuthenticators is DEPRECATED, setting it
has no effect.
items:
- description: deprecatedWebhookTokenAuthenticator holds the necessary
- configuration options for a remote token authenticator. It's the
- same as WebhookTokenAuthenticator but it's missing the 'required'
- validation on KubeConfig field.
+ description: |-
+ deprecatedWebhookTokenAuthenticator holds the necessary configuration options for a remote token authenticator.
+ It's the same as WebhookTokenAuthenticator but it's missing the 'required' validation on KubeConfig field.
properties:
kubeConfig:
- description: 'kubeConfig contains kube config file data which
- describes how to access the remote webhook service. For further
- details, see: https://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication
- The key "kubeConfig" is used to locate the data. If the secret
- or expected key is not found, the webhook is not honored.
- If the specified kube config data is not valid, the webhook
- is not honored. The namespace for this secret is determined
- by the point of use.'
+ description: |-
+ kubeConfig contains kube config file data which describes how to access the remote webhook service.
+ For further details, see:
+ https://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication
+ The key "kubeConfig" is used to locate the data.
+ If the secret or expected key is not found, the webhook is not honored.
+ If the specified kube config data is not valid, the webhook is not honored.
+ The namespace for this secret is determined by the point of use.
properties:
name:
description: name is the metadata.name of the referenced
@@ -358,18 +391,20 @@ spec:
be overridden.
properties:
integratedOAuthMetadata:
- description: 'integratedOAuthMetadata contains the discovery endpoint
- data for OAuth 2.0 Authorization Server Metadata for the in-cluster
- integrated OAuth server. This discovery document can be viewed from
- its served location: oc get --raw ''/.well-known/oauth-authorization-server''
- For further details, see the IETF Draft: https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2
- This contains the observed value based on cluster state. An explicitly
- set value in spec.oauthMetadata has precedence over this field.
- This field has no meaning if authentication spec.type is not set
- to IntegratedOAuth. The key "oauthMetadata" is used to locate the
- data. If the config map or expected key is not found, no metadata
- is served. If the specified metadata is not valid, no metadata is
- served. The namespace for this config map is openshift-config-managed.'
+ description: |-
+ integratedOAuthMetadata contains the discovery endpoint data for OAuth 2.0
+ Authorization Server Metadata for the in-cluster integrated OAuth server.
+ This discovery document can be viewed from its served location:
+ oc get --raw '/.well-known/oauth-authorization-server'
+ For further details, see the IETF Draft:
+ https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2
+ This contains the observed value based on cluster state.
+ An explicitly set value in spec.oauthMetadata has precedence over this field.
+ This field has no meaning if authentication spec.type is not set to IntegratedOAuth.
+ The key "oauthMetadata" is used to locate the data.
+ If the config map or expected key is not found, no metadata is served.
+ If the specified metadata is not valid, no metadata is served.
+ The namespace for this config map is openshift-config-managed.
properties:
name:
description: name is the metadata.name of the referenced config
@@ -379,9 +414,9 @@ spec:
- name
type: object
oidcClients:
- description: OIDCClients is where participating operators place the
- current OIDC client status for OIDC clients that can be customized
- by the cluster-admin.
+ description: |-
+ OIDCClients is where participating operators place the current OIDC client status
+ for OIDC clients that can be customized by the cluster-admin.
items:
properties:
componentName:
@@ -397,56 +432,45 @@ spec:
minLength: 1
type: string
conditions:
- description: "Conditions are used to communicate the state of
- the `oidcClients` entry. \n Supported conditions include Available,
- Degraded and Progressing. \n If Available is true, the component
- is successfully using the configured client. If Degraded is
- true, that means something has gone wrong trying to handle
- the client configuration. If Progressing is true, that means
- the component is taking some action related to the `oidcClients`
- entry."
+ description: |-
+ Conditions are used to communicate the state of the `oidcClients` entry.
+
+ Supported conditions include Available, Degraded and Progressing.
+
+ If Available is true, the component is successfully using the configured client.
+ If Degraded is true, that means something has gone wrong trying to handle the client configuration.
+ If Progressing is true, that means the component is taking some action related to the `oidcClients` entry.
items:
- description: "Condition contains details for one aspect of
- the current state of this API Resource. --- This struct
- is intended for direct use as an array at the field path
- .status.conditions. For example, \n type FooStatus struct{
- // Represents the observations of a foo's current state.
- // Known .status.conditions.type are: \"Available\", \"Progressing\",
- and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge
- // +listType=map // +listMapKey=type Conditions []metav1.Condition
- `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\"
- protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields
- }"
+ description: Condition contains details for one aspect of
+ the current state of this API Resource.
properties:
lastTransitionTime:
- description: lastTransitionTime is the last time the condition
- transitioned from one status to another. This should
- be when the underlying condition changed. If that is
- not known, then using the time when the API field changed
- is acceptable.
+ description: |-
+ lastTransitionTime is the last time the condition transitioned from one status to another.
+ This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.
format: date-time
type: string
message:
- description: message is a human readable message indicating
- details about the transition. This may be an empty string.
+ description: |-
+ message is a human readable message indicating details about the transition.
+ This may be an empty string.
maxLength: 32768
type: string
observedGeneration:
- description: observedGeneration represents the .metadata.generation
- that the condition was set based upon. For instance,
- if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration
- is 9, the condition is out of date with respect to the
- current state of the instance.
+ description: |-
+ observedGeneration represents the .metadata.generation that the condition was set based upon.
+ For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
+ with respect to the current state of the instance.
format: int64
minimum: 0
type: integer
reason:
- description: reason contains a programmatic identifier
- indicating the reason for the condition's last transition.
- Producers of specific condition types may define expected
- values and meanings for this field, and whether the
- values are considered a guaranteed API. The value should
- be a CamelCase string. This field may not be empty.
+ description: |-
+ reason contains a programmatic identifier indicating the reason for the condition's last transition.
+ Producers of specific condition types may define expected values and meanings for this field,
+ and whether the values are considered a guaranteed API.
+ The value should be a CamelCase string.
+ This field may not be empty.
maxLength: 1024
minLength: 1
pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
@@ -461,11 +485,6 @@ spec:
type: string
type:
description: type of condition in CamelCase or in foo.example.com/CamelCase.
- --- Many .condition.type values are consistent across
- resources like Available, but because arbitrary conditions
- can be useful (see .node.status.conditions), the ability
- to deconflict is important. The regex it matches is
- (dns1123SubdomainFmt/)?(qualifiedNameFmt)
maxLength: 316
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
@@ -481,8 +500,9 @@ spec:
- type
x-kubernetes-list-type: map
consumingUsers:
- description: ConsumingUsers is a slice of ServiceAccounts that
- need to have read permission on the `clientSecret` secret.
+ description: |-
+ ConsumingUsers is a slice of ServiceAccounts that need to have read
+ permission on the `clientSecret` secret.
items:
description: ConsumingUser is an alias for string which we
add validation to. Currently only service accounts are supported.
@@ -504,7 +524,8 @@ spec:
minLength: 1
type: string
issuerURL:
- description: URL is the serving URL of the token issuer.
+ description: |-
+ URL is the serving URL of the token issuer.
Must use the https:// scheme.
pattern: ^https:\/\/[^\s]
type: string
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-SelfManagedHA-Default.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-SelfManagedHA-Default.crd.yaml
index 72ccf31f6d25dc4b21eb6d37eb97336daca90f1d..59796535552838bf45766ef8352523651e91b235 100644
--- a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-SelfManagedHA-Default.crd.yaml
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-SelfManagedHA-Default.crd.yaml
@@ -20,20 +20,26 @@ spec:
- name: v1
schema:
openAPIV3Schema:
- description: "Authentication specifies cluster-wide settings for authentication
- (like OAuth and webhook token authenticators). The canonical name of an
- instance is `cluster`. \n Compatibility level 1: Stable within a major release
- for a minimum of 12 months or 3 minor releases (whichever is longer)."
+ description: |-
+ Authentication specifies cluster-wide settings for authentication (like OAuth and
+ webhook token authenticators). The canonical name of an instance is `cluster`.
+
+ Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -41,17 +47,19 @@ spec:
description: spec holds user settable values for configuration
properties:
oauthMetadata:
- description: 'oauthMetadata contains the discovery endpoint data for
- OAuth 2.0 Authorization Server Metadata for an external OAuth server.
+ description: |-
+ oauthMetadata contains the discovery endpoint data for OAuth 2.0
+ Authorization Server Metadata for an external OAuth server.
This discovery document can be viewed from its served location:
- oc get --raw ''/.well-known/oauth-authorization-server'' For further
- details, see the IETF Draft: https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2
- If oauthMetadata.name is non-empty, this value has precedence over
- any metadata reference stored in status. The key "oauthMetadata"
- is used to locate the data. If specified and the config map or expected
- key is not found, no metadata is served. If the specified metadata
- is not valid, no metadata is served. The namespace for this config
- map is openshift-config.'
+ oc get --raw '/.well-known/oauth-authorization-server'
+ For further details, see the IETF Draft:
+ https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2
+ If oauthMetadata.name is non-empty, this value has precedence
+ over any metadata reference stored in status.
+ The key "oauthMetadata" is used to locate the data.
+ If specified and the config map or expected key is not found, no metadata is served.
+ If the specified metadata is not valid, no metadata is served.
+ The namespace for this config map is openshift-config.
properties:
name:
description: name is the metadata.name of the referenced config
@@ -61,42 +69,48 @@ spec:
- name
type: object
serviceAccountIssuer:
- description: 'serviceAccountIssuer is the identifier of the bound
- service account token issuer. The default is https://kubernetes.default.svc
- WARNING: Updating this field will not result in immediate invalidation
- of all bound tokens with the previous issuer value. Instead, the
- tokens issued by previous service account issuer will continue to
- be trusted for a time period chosen by the platform (currently set
- to 24h). This time period is subject to change over time. This allows
- internal components to transition to use new service account issuer
- without service distruption.'
+ description: |-
+ serviceAccountIssuer is the identifier of the bound service account token
+ issuer.
+ The default is https://kubernetes.default.svc
+ WARNING: Updating this field will not result in immediate invalidation of all bound tokens with the
+ previous issuer value. Instead, the tokens issued by previous service account issuer will continue to
+ be trusted for a time period chosen by the platform (currently set to 24h).
+ This time period is subject to change over time.
+ This allows internal components to transition to use new service account issuer without service distruption.
type: string
type:
- description: type identifies the cluster managed, user facing authentication
- mode in use. Specifically, it manages the component that responds
- to login attempts. The default is IntegratedOAuth.
+ description: |-
+ type identifies the cluster managed, user facing authentication mode in use.
+ Specifically, it manages the component that responds to login attempts.
+ The default is IntegratedOAuth.
enum:
- ""
- None
- IntegratedOAuth
type: string
webhookTokenAuthenticator:
- description: "webhookTokenAuthenticator configures a remote token
- reviewer. These remote authentication webhooks can be used to verify
- bearer tokens via the tokenreviews.authentication.k8s.io REST API.
- This is required to honor bearer tokens that are provisioned by
- an external authentication service. \n Can only be set if \"Type\"
- is set to \"None\"."
+ description: |-
+ webhookTokenAuthenticator configures a remote token reviewer.
+ These remote authentication webhooks can be used to verify bearer tokens
+ via the tokenreviews.authentication.k8s.io REST API. This is required to
+ honor bearer tokens that are provisioned by an external authentication service.
+
+ Can only be set if "Type" is set to "None".
properties:
kubeConfig:
- description: "kubeConfig references a secret that contains kube
- config file data which describes how to access the remote webhook
- service. The namespace for the referenced secret is openshift-config.
- \n For further details, see: \n https://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication
- \n The key \"kubeConfig\" is used to locate the data. If the
- secret or expected key is not found, the webhook is not honored.
- If the specified kube config data is not valid, the webhook
- is not honored."
+ description: |-
+ kubeConfig references a secret that contains kube config file data which
+ describes how to access the remote webhook service.
+ The namespace for the referenced secret is openshift-config.
+
+ For further details, see:
+
+ https://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication
+
+ The key "kubeConfig" is used to locate the data.
+ If the secret or expected key is not found, the webhook is not honored.
+ If the specified kube config data is not valid, the webhook is not honored.
properties:
name:
description: name is the metadata.name of the referenced secret
@@ -111,20 +125,19 @@ spec:
description: webhookTokenAuthenticators is DEPRECATED, setting it
has no effect.
items:
- description: deprecatedWebhookTokenAuthenticator holds the necessary
- configuration options for a remote token authenticator. It's the
- same as WebhookTokenAuthenticator but it's missing the 'required'
- validation on KubeConfig field.
+ description: |-
+ deprecatedWebhookTokenAuthenticator holds the necessary configuration options for a remote token authenticator.
+ It's the same as WebhookTokenAuthenticator but it's missing the 'required' validation on KubeConfig field.
properties:
kubeConfig:
- description: 'kubeConfig contains kube config file data which
- describes how to access the remote webhook service. For further
- details, see: https://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication
- The key "kubeConfig" is used to locate the data. If the secret
- or expected key is not found, the webhook is not honored.
- If the specified kube config data is not valid, the webhook
- is not honored. The namespace for this secret is determined
- by the point of use.'
+ description: |-
+ kubeConfig contains kube config file data which describes how to access the remote webhook service.
+ For further details, see:
+ https://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication
+ The key "kubeConfig" is used to locate the data.
+ If the secret or expected key is not found, the webhook is not honored.
+ If the specified kube config data is not valid, the webhook is not honored.
+ The namespace for this secret is determined by the point of use.
properties:
name:
description: name is the metadata.name of the referenced
@@ -142,18 +155,20 @@ spec:
be overridden.
properties:
integratedOAuthMetadata:
- description: 'integratedOAuthMetadata contains the discovery endpoint
- data for OAuth 2.0 Authorization Server Metadata for the in-cluster
- integrated OAuth server. This discovery document can be viewed from
- its served location: oc get --raw ''/.well-known/oauth-authorization-server''
- For further details, see the IETF Draft: https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2
- This contains the observed value based on cluster state. An explicitly
- set value in spec.oauthMetadata has precedence over this field.
- This field has no meaning if authentication spec.type is not set
- to IntegratedOAuth. The key "oauthMetadata" is used to locate the
- data. If the config map or expected key is not found, no metadata
- is served. If the specified metadata is not valid, no metadata is
- served. The namespace for this config map is openshift-config-managed.'
+ description: |-
+ integratedOAuthMetadata contains the discovery endpoint data for OAuth 2.0
+ Authorization Server Metadata for the in-cluster integrated OAuth server.
+ This discovery document can be viewed from its served location:
+ oc get --raw '/.well-known/oauth-authorization-server'
+ For further details, see the IETF Draft:
+ https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2
+ This contains the observed value based on cluster state.
+ An explicitly set value in spec.oauthMetadata has precedence over this field.
+ This field has no meaning if authentication spec.type is not set to IntegratedOAuth.
+ The key "oauthMetadata" is used to locate the data.
+ If the config map or expected key is not found, no metadata is served.
+ If the specified metadata is not valid, no metadata is served.
+ The namespace for this config map is openshift-config-managed.
properties:
name:
description: name is the metadata.name of the referenced config
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-SelfManagedHA-DevPreviewNoUpgrade.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-SelfManagedHA-DevPreviewNoUpgrade.crd.yaml
index 1bb1e92ddd931bbda51e5f9fff8ce3fbef9a5de3..b2968832e3c84b8ce32e12f56a68a1098a71f97b 100644
--- a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-SelfManagedHA-DevPreviewNoUpgrade.crd.yaml
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-SelfManagedHA-DevPreviewNoUpgrade.crd.yaml
@@ -20,20 +20,26 @@ spec:
- name: v1
schema:
openAPIV3Schema:
- description: "Authentication specifies cluster-wide settings for authentication
- (like OAuth and webhook token authenticators). The canonical name of an
- instance is `cluster`. \n Compatibility level 1: Stable within a major release
- for a minimum of 12 months or 3 minor releases (whichever is longer)."
+ description: |-
+ Authentication specifies cluster-wide settings for authentication (like OAuth and
+ webhook token authenticators). The canonical name of an instance is `cluster`.
+
+ Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -41,17 +47,19 @@ spec:
description: spec holds user settable values for configuration
properties:
oauthMetadata:
- description: 'oauthMetadata contains the discovery endpoint data for
- OAuth 2.0 Authorization Server Metadata for an external OAuth server.
+ description: |-
+ oauthMetadata contains the discovery endpoint data for OAuth 2.0
+ Authorization Server Metadata for an external OAuth server.
This discovery document can be viewed from its served location:
- oc get --raw ''/.well-known/oauth-authorization-server'' For further
- details, see the IETF Draft: https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2
- If oauthMetadata.name is non-empty, this value has precedence over
- any metadata reference stored in status. The key "oauthMetadata"
- is used to locate the data. If specified and the config map or expected
- key is not found, no metadata is served. If the specified metadata
- is not valid, no metadata is served. The namespace for this config
- map is openshift-config.'
+ oc get --raw '/.well-known/oauth-authorization-server'
+ For further details, see the IETF Draft:
+ https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2
+ If oauthMetadata.name is non-empty, this value has precedence
+ over any metadata reference stored in status.
+ The key "oauthMetadata" is used to locate the data.
+ If specified and the config map or expected key is not found, no metadata is served.
+ If the specified metadata is not valid, no metadata is served.
+ The namespace for this config map is openshift-config.
properties:
name:
description: name is the metadata.name of the referenced config
@@ -61,40 +69,49 @@ spec:
- name
type: object
oidcProviders:
- description: "OIDCProviders are OIDC identity providers that can issue
- tokens for this cluster Can only be set if \"Type\" is set to \"OIDC\".
- \n At most one provider can be configured."
+ description: |-
+ OIDCProviders are OIDC identity providers that can issue tokens
+ for this cluster
+ Can only be set if "Type" is set to "OIDC".
+
+ At most one provider can be configured.
items:
properties:
claimMappings:
- description: ClaimMappings describes rules on how to transform
- information from an ID token into a cluster identity
+ description: |-
+ ClaimMappings describes rules on how to transform information from an
+ ID token into a cluster identity
properties:
groups:
- description: Groups is a name of the claim that should be
- used to construct groups for the cluster identity. The
- referenced claim must use array of strings values.
+ description: |-
+ Groups is a name of the claim that should be used to construct
+ groups for the cluster identity.
+ The referenced claim must use array of strings values.
properties:
claim:
description: Claim is a JWT token claim to be used in
the mapping
type: string
prefix:
- description: "Prefix is a string to prefix the value
- from the token in the result of the claim mapping.
- \n By default, no prefixing occurs. \n Example: if
- `prefix` is set to \"myoidc:\"\" and the `claim` in
- JWT contains an array of strings \"a\", \"b\" and
- \ \"c\", the mapping will result in an array of string
- \"myoidc:a\", \"myoidc:b\" and \"myoidc:c\"."
+ description: |-
+ Prefix is a string to prefix the value from the token in the result of the
+ claim mapping.
+
+ By default, no prefixing occurs.
+
+ Example: if `prefix` is set to "myoidc:"" and the `claim` in JWT contains
+ an array of strings "a", "b" and "c", the mapping will result in an
+ array of string "myoidc:a", "myoidc:b" and "myoidc:c".
type: string
required:
- claim
type: object
username:
- description: "Username is a name of the claim that should
- be used to construct usernames for the cluster identity.
- \n Default value: \"sub\""
+ description: |-
+ Username is a name of the claim that should be used to construct
+ usernames for the cluster identity.
+
+ Default value: "sub"
properties:
claim:
description: Claim is a JWT token claim to be used in
@@ -109,23 +126,26 @@ spec:
- prefixString
type: object
prefixPolicy:
- description: "PrefixPolicy specifies how a prefix should
- apply. \n By default, claims other than `email` will
- be prefixed with the issuer URL to prevent naming
- clashes with other plugins. \n Set to \"NoPrefix\"
- to disable prefixing. \n Example: (1) `prefix` is
- set to \"myoidc:\" and `claim` is set to \"username\".
- If the JWT claim `username` contains value `userA`,
- the resulting mapped value will be \"myoidc:userA\".
- (2) `prefix` is set to \"myoidc:\" and `claim` is
- set to \"email\". If the JWT `email` claim contains
- value \"userA@myoidc.tld\", the resulting mapped value
- will be \"myoidc:userA@myoidc.tld\". (3) `prefix`
- is unset, `issuerURL` is set to `https://myoidc.tld`,
- the JWT claims include \"username\":\"userA\" and
- \"email\":\"userA@myoidc.tld\", and `claim` is set
- to: (a) \"username\": the mapped value will be \"https://myoidc.tld#userA\"
- (b) \"email\": the mapped value will be \"userA@myoidc.tld\""
+ description: |-
+ PrefixPolicy specifies how a prefix should apply.
+
+ By default, claims other than `email` will be prefixed with the issuer URL to
+ prevent naming clashes with other plugins.
+
+ Set to "NoPrefix" to disable prefixing.
+
+ Example:
+ (1) `prefix` is set to "myoidc:" and `claim` is set to "username".
+ If the JWT claim `username` contains value `userA`, the resulting
+ mapped value will be "myoidc:userA".
+ (2) `prefix` is set to "myoidc:" and `claim` is set to "email". If the
+ JWT `email` claim contains value "userA@myoidc.tld", the resulting
+ mapped value will be "myoidc:userA@myoidc.tld".
+ (3) `prefix` is unset, `issuerURL` is set to `https://myoidc.tld`,
+ the JWT claims include "username":"userA" and "email":"userA@myoidc.tld",
+ and `claim` is set to:
+ (a) "username": the mapped value will be "https://myoidc.tld#userA"
+ (b) "email": the mapped value will be "userA@myoidc.tld"
enum:
- ""
- NoPrefix
@@ -147,12 +167,14 @@ spec:
items:
properties:
requiredClaim:
- description: RequiredClaim allows configuring a required
- claim name and its expected value
+ description: |-
+ RequiredClaim allows configuring a required claim name and its expected
+ value
properties:
claim:
- description: Claim is a name of a required claim.
- Only claims with string values are supported.
+ description: |-
+ Claim is a name of a required claim. Only claims with string values are
+ supported.
minLength: 1
type: string
requiredValue:
@@ -177,10 +199,11 @@ spec:
description: Issuer describes atributes of the OIDC token issuer
properties:
audiences:
- description: Audiences is an array of audiences that the
- token was issued for. Valid tokens must include at least
- one of these values in their "aud" claim. Must be set
- to exactly one value.
+ description: |-
+ Audiences is an array of audiences that the token was issued for.
+ Valid tokens must include at least one of these values in their
+ "aud" claim.
+ Must be set to exactly one value.
items:
minLength: 1
type: string
@@ -189,10 +212,11 @@ spec:
type: array
x-kubernetes-list-type: set
issuerCertificateAuthority:
- description: CertificateAuthority is a reference to a config
- map in the configuration namespace. The .data of the configMap
- must contain the "ca-bundle.crt" key. If unset, system
- trust is used instead.
+ description: |-
+ CertificateAuthority is a reference to a config map in the
+ configuration namespace. The .data of the configMap must contain
+ the "ca-bundle.crt" key.
+ If unset, system trust is used instead.
properties:
name:
description: name is the metadata.name of the referenced
@@ -202,7 +226,8 @@ spec:
- name
type: object
issuerURL:
- description: URL is the serving URL of the token issuer.
+ description: |-
+ URL is the serving URL of the token issuer.
Must use the https:// scheme.
pattern: ^https:\/\/[^\s]
type: string
@@ -215,8 +240,9 @@ spec:
minLength: 1
type: string
oidcClients:
- description: OIDCClients contains configuration for the platform's
- clients that need to request tokens from the issuer
+ description: |-
+ OIDCClients contains configuration for the platform's clients that
+ need to request tokens from the issuer
items:
properties:
clientID:
@@ -225,9 +251,9 @@ spec:
minLength: 1
type: string
clientSecret:
- description: ClientSecret refers to a secret in the `openshift-config`
- namespace that contains the client secret in the `clientSecret`
- key of the `.data` field
+ description: |-
+ ClientSecret refers to a secret in the `openshift-config` namespace that
+ contains the client secret in the `clientSecret` key of the `.data` field
properties:
name:
description: name is the metadata.name of the referenced
@@ -237,14 +263,16 @@ spec:
- name
type: object
componentName:
- description: ComponentName is the name of the component
- that is supposed to consume this client configuration
+ description: |-
+ ComponentName is the name of the component that is supposed to consume this
+ client configuration
maxLength: 256
minLength: 1
type: string
componentNamespace:
- description: ComponentNamespace is the namespace of the
- component that is supposed to consume this client configuration
+ description: |-
+ ComponentNamespace is the namespace of the component that is supposed to consume this
+ client configuration
maxLength: 63
minLength: 1
type: string
@@ -276,20 +304,21 @@ spec:
- name
x-kubernetes-list-type: map
serviceAccountIssuer:
- description: 'serviceAccountIssuer is the identifier of the bound
- service account token issuer. The default is https://kubernetes.default.svc
- WARNING: Updating this field will not result in immediate invalidation
- of all bound tokens with the previous issuer value. Instead, the
- tokens issued by previous service account issuer will continue to
- be trusted for a time period chosen by the platform (currently set
- to 24h). This time period is subject to change over time. This allows
- internal components to transition to use new service account issuer
- without service distruption.'
+ description: |-
+ serviceAccountIssuer is the identifier of the bound service account token
+ issuer.
+ The default is https://kubernetes.default.svc
+ WARNING: Updating this field will not result in immediate invalidation of all bound tokens with the
+ previous issuer value. Instead, the tokens issued by previous service account issuer will continue to
+ be trusted for a time period chosen by the platform (currently set to 24h).
+ This time period is subject to change over time.
+ This allows internal components to transition to use new service account issuer without service distruption.
type: string
type:
- description: type identifies the cluster managed, user facing authentication
- mode in use. Specifically, it manages the component that responds
- to login attempts. The default is IntegratedOAuth.
+ description: |-
+ type identifies the cluster managed, user facing authentication mode in use.
+ Specifically, it manages the component that responds to login attempts.
+ The default is IntegratedOAuth.
enum:
- ""
- None
@@ -297,22 +326,27 @@ spec:
- OIDC
type: string
webhookTokenAuthenticator:
- description: "webhookTokenAuthenticator configures a remote token
- reviewer. These remote authentication webhooks can be used to verify
- bearer tokens via the tokenreviews.authentication.k8s.io REST API.
- This is required to honor bearer tokens that are provisioned by
- an external authentication service. \n Can only be set if \"Type\"
- is set to \"None\"."
+ description: |-
+ webhookTokenAuthenticator configures a remote token reviewer.
+ These remote authentication webhooks can be used to verify bearer tokens
+ via the tokenreviews.authentication.k8s.io REST API. This is required to
+ honor bearer tokens that are provisioned by an external authentication service.
+
+ Can only be set if "Type" is set to "None".
properties:
kubeConfig:
- description: "kubeConfig references a secret that contains kube
- config file data which describes how to access the remote webhook
- service. The namespace for the referenced secret is openshift-config.
- \n For further details, see: \n https://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication
- \n The key \"kubeConfig\" is used to locate the data. If the
- secret or expected key is not found, the webhook is not honored.
- If the specified kube config data is not valid, the webhook
- is not honored."
+ description: |-
+ kubeConfig references a secret that contains kube config file data which
+ describes how to access the remote webhook service.
+ The namespace for the referenced secret is openshift-config.
+
+ For further details, see:
+
+ https://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication
+
+ The key "kubeConfig" is used to locate the data.
+ If the secret or expected key is not found, the webhook is not honored.
+ If the specified kube config data is not valid, the webhook is not honored.
properties:
name:
description: name is the metadata.name of the referenced secret
@@ -327,20 +361,19 @@ spec:
description: webhookTokenAuthenticators is DEPRECATED, setting it
has no effect.
items:
- description: deprecatedWebhookTokenAuthenticator holds the necessary
- configuration options for a remote token authenticator. It's the
- same as WebhookTokenAuthenticator but it's missing the 'required'
- validation on KubeConfig field.
+ description: |-
+ deprecatedWebhookTokenAuthenticator holds the necessary configuration options for a remote token authenticator.
+ It's the same as WebhookTokenAuthenticator but it's missing the 'required' validation on KubeConfig field.
properties:
kubeConfig:
- description: 'kubeConfig contains kube config file data which
- describes how to access the remote webhook service. For further
- details, see: https://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication
- The key "kubeConfig" is used to locate the data. If the secret
- or expected key is not found, the webhook is not honored.
- If the specified kube config data is not valid, the webhook
- is not honored. The namespace for this secret is determined
- by the point of use.'
+ description: |-
+ kubeConfig contains kube config file data which describes how to access the remote webhook service.
+ For further details, see:
+ https://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication
+ The key "kubeConfig" is used to locate the data.
+ If the secret or expected key is not found, the webhook is not honored.
+ If the specified kube config data is not valid, the webhook is not honored.
+ The namespace for this secret is determined by the point of use.
properties:
name:
description: name is the metadata.name of the referenced
@@ -358,18 +391,20 @@ spec:
be overridden.
properties:
integratedOAuthMetadata:
- description: 'integratedOAuthMetadata contains the discovery endpoint
- data for OAuth 2.0 Authorization Server Metadata for the in-cluster
- integrated OAuth server. This discovery document can be viewed from
- its served location: oc get --raw ''/.well-known/oauth-authorization-server''
- For further details, see the IETF Draft: https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2
- This contains the observed value based on cluster state. An explicitly
- set value in spec.oauthMetadata has precedence over this field.
- This field has no meaning if authentication spec.type is not set
- to IntegratedOAuth. The key "oauthMetadata" is used to locate the
- data. If the config map or expected key is not found, no metadata
- is served. If the specified metadata is not valid, no metadata is
- served. The namespace for this config map is openshift-config-managed.'
+ description: |-
+ integratedOAuthMetadata contains the discovery endpoint data for OAuth 2.0
+ Authorization Server Metadata for the in-cluster integrated OAuth server.
+ This discovery document can be viewed from its served location:
+ oc get --raw '/.well-known/oauth-authorization-server'
+ For further details, see the IETF Draft:
+ https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2
+ This contains the observed value based on cluster state.
+ An explicitly set value in spec.oauthMetadata has precedence over this field.
+ This field has no meaning if authentication spec.type is not set to IntegratedOAuth.
+ The key "oauthMetadata" is used to locate the data.
+ If the config map or expected key is not found, no metadata is served.
+ If the specified metadata is not valid, no metadata is served.
+ The namespace for this config map is openshift-config-managed.
properties:
name:
description: name is the metadata.name of the referenced config
@@ -379,9 +414,9 @@ spec:
- name
type: object
oidcClients:
- description: OIDCClients is where participating operators place the
- current OIDC client status for OIDC clients that can be customized
- by the cluster-admin.
+ description: |-
+ OIDCClients is where participating operators place the current OIDC client status
+ for OIDC clients that can be customized by the cluster-admin.
items:
properties:
componentName:
@@ -397,56 +432,45 @@ spec:
minLength: 1
type: string
conditions:
- description: "Conditions are used to communicate the state of
- the `oidcClients` entry. \n Supported conditions include Available,
- Degraded and Progressing. \n If Available is true, the component
- is successfully using the configured client. If Degraded is
- true, that means something has gone wrong trying to handle
- the client configuration. If Progressing is true, that means
- the component is taking some action related to the `oidcClients`
- entry."
+ description: |-
+ Conditions are used to communicate the state of the `oidcClients` entry.
+
+ Supported conditions include Available, Degraded and Progressing.
+
+ If Available is true, the component is successfully using the configured client.
+ If Degraded is true, that means something has gone wrong trying to handle the client configuration.
+ If Progressing is true, that means the component is taking some action related to the `oidcClients` entry.
items:
- description: "Condition contains details for one aspect of
- the current state of this API Resource. --- This struct
- is intended for direct use as an array at the field path
- .status.conditions. For example, \n type FooStatus struct{
- // Represents the observations of a foo's current state.
- // Known .status.conditions.type are: \"Available\", \"Progressing\",
- and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge
- // +listType=map // +listMapKey=type Conditions []metav1.Condition
- `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\"
- protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields
- }"
+ description: Condition contains details for one aspect of
+ the current state of this API Resource.
properties:
lastTransitionTime:
- description: lastTransitionTime is the last time the condition
- transitioned from one status to another. This should
- be when the underlying condition changed. If that is
- not known, then using the time when the API field changed
- is acceptable.
+ description: |-
+ lastTransitionTime is the last time the condition transitioned from one status to another.
+ This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.
format: date-time
type: string
message:
- description: message is a human readable message indicating
- details about the transition. This may be an empty string.
+ description: |-
+ message is a human readable message indicating details about the transition.
+ This may be an empty string.
maxLength: 32768
type: string
observedGeneration:
- description: observedGeneration represents the .metadata.generation
- that the condition was set based upon. For instance,
- if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration
- is 9, the condition is out of date with respect to the
- current state of the instance.
+ description: |-
+ observedGeneration represents the .metadata.generation that the condition was set based upon.
+ For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
+ with respect to the current state of the instance.
format: int64
minimum: 0
type: integer
reason:
- description: reason contains a programmatic identifier
- indicating the reason for the condition's last transition.
- Producers of specific condition types may define expected
- values and meanings for this field, and whether the
- values are considered a guaranteed API. The value should
- be a CamelCase string. This field may not be empty.
+ description: |-
+ reason contains a programmatic identifier indicating the reason for the condition's last transition.
+ Producers of specific condition types may define expected values and meanings for this field,
+ and whether the values are considered a guaranteed API.
+ The value should be a CamelCase string.
+ This field may not be empty.
maxLength: 1024
minLength: 1
pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
@@ -461,11 +485,6 @@ spec:
type: string
type:
description: type of condition in CamelCase or in foo.example.com/CamelCase.
- --- Many .condition.type values are consistent across
- resources like Available, but because arbitrary conditions
- can be useful (see .node.status.conditions), the ability
- to deconflict is important. The regex it matches is
- (dns1123SubdomainFmt/)?(qualifiedNameFmt)
maxLength: 316
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
@@ -481,8 +500,9 @@ spec:
- type
x-kubernetes-list-type: map
consumingUsers:
- description: ConsumingUsers is a slice of ServiceAccounts that
- need to have read permission on the `clientSecret` secret.
+ description: |-
+ ConsumingUsers is a slice of ServiceAccounts that need to have read
+ permission on the `clientSecret` secret.
items:
description: ConsumingUser is an alias for string which we
add validation to. Currently only service accounts are supported.
@@ -504,7 +524,8 @@ spec:
minLength: 1
type: string
issuerURL:
- description: URL is the serving URL of the token issuer.
+ description: |-
+ URL is the serving URL of the token issuer.
Must use the https:// scheme.
pattern: ^https:\/\/[^\s]
type: string
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-SelfManagedHA-TechPreviewNoUpgrade.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-SelfManagedHA-TechPreviewNoUpgrade.crd.yaml
index c8711ecbaef50971cdd1d5de38d82f0296b272ab..bd450f3a7dd77e4ec81640ca64d922338d6dcbd9 100644
--- a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-SelfManagedHA-TechPreviewNoUpgrade.crd.yaml
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-SelfManagedHA-TechPreviewNoUpgrade.crd.yaml
@@ -20,20 +20,26 @@ spec:
- name: v1
schema:
openAPIV3Schema:
- description: "Authentication specifies cluster-wide settings for authentication
- (like OAuth and webhook token authenticators). The canonical name of an
- instance is `cluster`. \n Compatibility level 1: Stable within a major release
- for a minimum of 12 months or 3 minor releases (whichever is longer)."
+ description: |-
+ Authentication specifies cluster-wide settings for authentication (like OAuth and
+ webhook token authenticators). The canonical name of an instance is `cluster`.
+
+ Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -41,17 +47,19 @@ spec:
description: spec holds user settable values for configuration
properties:
oauthMetadata:
- description: 'oauthMetadata contains the discovery endpoint data for
- OAuth 2.0 Authorization Server Metadata for an external OAuth server.
+ description: |-
+ oauthMetadata contains the discovery endpoint data for OAuth 2.0
+ Authorization Server Metadata for an external OAuth server.
This discovery document can be viewed from its served location:
- oc get --raw ''/.well-known/oauth-authorization-server'' For further
- details, see the IETF Draft: https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2
- If oauthMetadata.name is non-empty, this value has precedence over
- any metadata reference stored in status. The key "oauthMetadata"
- is used to locate the data. If specified and the config map or expected
- key is not found, no metadata is served. If the specified metadata
- is not valid, no metadata is served. The namespace for this config
- map is openshift-config.'
+ oc get --raw '/.well-known/oauth-authorization-server'
+ For further details, see the IETF Draft:
+ https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2
+ If oauthMetadata.name is non-empty, this value has precedence
+ over any metadata reference stored in status.
+ The key "oauthMetadata" is used to locate the data.
+ If specified and the config map or expected key is not found, no metadata is served.
+ If the specified metadata is not valid, no metadata is served.
+ The namespace for this config map is openshift-config.
properties:
name:
description: name is the metadata.name of the referenced config
@@ -61,40 +69,49 @@ spec:
- name
type: object
oidcProviders:
- description: "OIDCProviders are OIDC identity providers that can issue
- tokens for this cluster Can only be set if \"Type\" is set to \"OIDC\".
- \n At most one provider can be configured."
+ description: |-
+ OIDCProviders are OIDC identity providers that can issue tokens
+ for this cluster
+ Can only be set if "Type" is set to "OIDC".
+
+ At most one provider can be configured.
items:
properties:
claimMappings:
- description: ClaimMappings describes rules on how to transform
- information from an ID token into a cluster identity
+ description: |-
+ ClaimMappings describes rules on how to transform information from an
+ ID token into a cluster identity
properties:
groups:
- description: Groups is a name of the claim that should be
- used to construct groups for the cluster identity. The
- referenced claim must use array of strings values.
+ description: |-
+ Groups is a name of the claim that should be used to construct
+ groups for the cluster identity.
+ The referenced claim must use array of strings values.
properties:
claim:
description: Claim is a JWT token claim to be used in
the mapping
type: string
prefix:
- description: "Prefix is a string to prefix the value
- from the token in the result of the claim mapping.
- \n By default, no prefixing occurs. \n Example: if
- `prefix` is set to \"myoidc:\"\" and the `claim` in
- JWT contains an array of strings \"a\", \"b\" and
- \ \"c\", the mapping will result in an array of string
- \"myoidc:a\", \"myoidc:b\" and \"myoidc:c\"."
+ description: |-
+ Prefix is a string to prefix the value from the token in the result of the
+ claim mapping.
+
+ By default, no prefixing occurs.
+
+ Example: if `prefix` is set to "myoidc:"" and the `claim` in JWT contains
+ an array of strings "a", "b" and "c", the mapping will result in an
+ array of string "myoidc:a", "myoidc:b" and "myoidc:c".
type: string
required:
- claim
type: object
username:
- description: "Username is a name of the claim that should
- be used to construct usernames for the cluster identity.
- \n Default value: \"sub\""
+ description: |-
+ Username is a name of the claim that should be used to construct
+ usernames for the cluster identity.
+
+ Default value: "sub"
properties:
claim:
description: Claim is a JWT token claim to be used in
@@ -109,23 +126,26 @@ spec:
- prefixString
type: object
prefixPolicy:
- description: "PrefixPolicy specifies how a prefix should
- apply. \n By default, claims other than `email` will
- be prefixed with the issuer URL to prevent naming
- clashes with other plugins. \n Set to \"NoPrefix\"
- to disable prefixing. \n Example: (1) `prefix` is
- set to \"myoidc:\" and `claim` is set to \"username\".
- If the JWT claim `username` contains value `userA`,
- the resulting mapped value will be \"myoidc:userA\".
- (2) `prefix` is set to \"myoidc:\" and `claim` is
- set to \"email\". If the JWT `email` claim contains
- value \"userA@myoidc.tld\", the resulting mapped value
- will be \"myoidc:userA@myoidc.tld\". (3) `prefix`
- is unset, `issuerURL` is set to `https://myoidc.tld`,
- the JWT claims include \"username\":\"userA\" and
- \"email\":\"userA@myoidc.tld\", and `claim` is set
- to: (a) \"username\": the mapped value will be \"https://myoidc.tld#userA\"
- (b) \"email\": the mapped value will be \"userA@myoidc.tld\""
+ description: |-
+ PrefixPolicy specifies how a prefix should apply.
+
+ By default, claims other than `email` will be prefixed with the issuer URL to
+ prevent naming clashes with other plugins.
+
+ Set to "NoPrefix" to disable prefixing.
+
+ Example:
+ (1) `prefix` is set to "myoidc:" and `claim` is set to "username".
+ If the JWT claim `username` contains value `userA`, the resulting
+ mapped value will be "myoidc:userA".
+ (2) `prefix` is set to "myoidc:" and `claim` is set to "email". If the
+ JWT `email` claim contains value "userA@myoidc.tld", the resulting
+ mapped value will be "myoidc:userA@myoidc.tld".
+ (3) `prefix` is unset, `issuerURL` is set to `https://myoidc.tld`,
+ the JWT claims include "username":"userA" and "email":"userA@myoidc.tld",
+ and `claim` is set to:
+ (a) "username": the mapped value will be "https://myoidc.tld#userA"
+ (b) "email": the mapped value will be "userA@myoidc.tld"
enum:
- ""
- NoPrefix
@@ -147,12 +167,14 @@ spec:
items:
properties:
requiredClaim:
- description: RequiredClaim allows configuring a required
- claim name and its expected value
+ description: |-
+ RequiredClaim allows configuring a required claim name and its expected
+ value
properties:
claim:
- description: Claim is a name of a required claim.
- Only claims with string values are supported.
+ description: |-
+ Claim is a name of a required claim. Only claims with string values are
+ supported.
minLength: 1
type: string
requiredValue:
@@ -177,10 +199,11 @@ spec:
description: Issuer describes atributes of the OIDC token issuer
properties:
audiences:
- description: Audiences is an array of audiences that the
- token was issued for. Valid tokens must include at least
- one of these values in their "aud" claim. Must be set
- to exactly one value.
+ description: |-
+ Audiences is an array of audiences that the token was issued for.
+ Valid tokens must include at least one of these values in their
+ "aud" claim.
+ Must be set to exactly one value.
items:
minLength: 1
type: string
@@ -189,10 +212,11 @@ spec:
type: array
x-kubernetes-list-type: set
issuerCertificateAuthority:
- description: CertificateAuthority is a reference to a config
- map in the configuration namespace. The .data of the configMap
- must contain the "ca-bundle.crt" key. If unset, system
- trust is used instead.
+ description: |-
+ CertificateAuthority is a reference to a config map in the
+ configuration namespace. The .data of the configMap must contain
+ the "ca-bundle.crt" key.
+ If unset, system trust is used instead.
properties:
name:
description: name is the metadata.name of the referenced
@@ -202,7 +226,8 @@ spec:
- name
type: object
issuerURL:
- description: URL is the serving URL of the token issuer.
+ description: |-
+ URL is the serving URL of the token issuer.
Must use the https:// scheme.
pattern: ^https:\/\/[^\s]
type: string
@@ -215,8 +240,9 @@ spec:
minLength: 1
type: string
oidcClients:
- description: OIDCClients contains configuration for the platform's
- clients that need to request tokens from the issuer
+ description: |-
+ OIDCClients contains configuration for the platform's clients that
+ need to request tokens from the issuer
items:
properties:
clientID:
@@ -225,9 +251,9 @@ spec:
minLength: 1
type: string
clientSecret:
- description: ClientSecret refers to a secret in the `openshift-config`
- namespace that contains the client secret in the `clientSecret`
- key of the `.data` field
+ description: |-
+ ClientSecret refers to a secret in the `openshift-config` namespace that
+ contains the client secret in the `clientSecret` key of the `.data` field
properties:
name:
description: name is the metadata.name of the referenced
@@ -237,14 +263,16 @@ spec:
- name
type: object
componentName:
- description: ComponentName is the name of the component
- that is supposed to consume this client configuration
+ description: |-
+ ComponentName is the name of the component that is supposed to consume this
+ client configuration
maxLength: 256
minLength: 1
type: string
componentNamespace:
- description: ComponentNamespace is the namespace of the
- component that is supposed to consume this client configuration
+ description: |-
+ ComponentNamespace is the namespace of the component that is supposed to consume this
+ client configuration
maxLength: 63
minLength: 1
type: string
@@ -276,20 +304,21 @@ spec:
- name
x-kubernetes-list-type: map
serviceAccountIssuer:
- description: 'serviceAccountIssuer is the identifier of the bound
- service account token issuer. The default is https://kubernetes.default.svc
- WARNING: Updating this field will not result in immediate invalidation
- of all bound tokens with the previous issuer value. Instead, the
- tokens issued by previous service account issuer will continue to
- be trusted for a time period chosen by the platform (currently set
- to 24h). This time period is subject to change over time. This allows
- internal components to transition to use new service account issuer
- without service distruption.'
+ description: |-
+ serviceAccountIssuer is the identifier of the bound service account token
+ issuer.
+ The default is https://kubernetes.default.svc
+ WARNING: Updating this field will not result in immediate invalidation of all bound tokens with the
+ previous issuer value. Instead, the tokens issued by previous service account issuer will continue to
+ be trusted for a time period chosen by the platform (currently set to 24h).
+ This time period is subject to change over time.
+ This allows internal components to transition to use new service account issuer without service distruption.
type: string
type:
- description: type identifies the cluster managed, user facing authentication
- mode in use. Specifically, it manages the component that responds
- to login attempts. The default is IntegratedOAuth.
+ description: |-
+ type identifies the cluster managed, user facing authentication mode in use.
+ Specifically, it manages the component that responds to login attempts.
+ The default is IntegratedOAuth.
enum:
- ""
- None
@@ -297,22 +326,27 @@ spec:
- OIDC
type: string
webhookTokenAuthenticator:
- description: "webhookTokenAuthenticator configures a remote token
- reviewer. These remote authentication webhooks can be used to verify
- bearer tokens via the tokenreviews.authentication.k8s.io REST API.
- This is required to honor bearer tokens that are provisioned by
- an external authentication service. \n Can only be set if \"Type\"
- is set to \"None\"."
+ description: |-
+ webhookTokenAuthenticator configures a remote token reviewer.
+ These remote authentication webhooks can be used to verify bearer tokens
+ via the tokenreviews.authentication.k8s.io REST API. This is required to
+ honor bearer tokens that are provisioned by an external authentication service.
+
+ Can only be set if "Type" is set to "None".
properties:
kubeConfig:
- description: "kubeConfig references a secret that contains kube
- config file data which describes how to access the remote webhook
- service. The namespace for the referenced secret is openshift-config.
- \n For further details, see: \n https://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication
- \n The key \"kubeConfig\" is used to locate the data. If the
- secret or expected key is not found, the webhook is not honored.
- If the specified kube config data is not valid, the webhook
- is not honored."
+ description: |-
+ kubeConfig references a secret that contains kube config file data which
+ describes how to access the remote webhook service.
+ The namespace for the referenced secret is openshift-config.
+
+ For further details, see:
+
+ https://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication
+
+ The key "kubeConfig" is used to locate the data.
+ If the secret or expected key is not found, the webhook is not honored.
+ If the specified kube config data is not valid, the webhook is not honored.
properties:
name:
description: name is the metadata.name of the referenced secret
@@ -327,20 +361,19 @@ spec:
description: webhookTokenAuthenticators is DEPRECATED, setting it
has no effect.
items:
- description: deprecatedWebhookTokenAuthenticator holds the necessary
- configuration options for a remote token authenticator. It's the
- same as WebhookTokenAuthenticator but it's missing the 'required'
- validation on KubeConfig field.
+ description: |-
+ deprecatedWebhookTokenAuthenticator holds the necessary configuration options for a remote token authenticator.
+ It's the same as WebhookTokenAuthenticator but it's missing the 'required' validation on KubeConfig field.
properties:
kubeConfig:
- description: 'kubeConfig contains kube config file data which
- describes how to access the remote webhook service. For further
- details, see: https://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication
- The key "kubeConfig" is used to locate the data. If the secret
- or expected key is not found, the webhook is not honored.
- If the specified kube config data is not valid, the webhook
- is not honored. The namespace for this secret is determined
- by the point of use.'
+ description: |-
+ kubeConfig contains kube config file data which describes how to access the remote webhook service.
+ For further details, see:
+ https://kubernetes.io/docs/reference/access-authn-authz/authentication/#webhook-token-authentication
+ The key "kubeConfig" is used to locate the data.
+ If the secret or expected key is not found, the webhook is not honored.
+ If the specified kube config data is not valid, the webhook is not honored.
+ The namespace for this secret is determined by the point of use.
properties:
name:
description: name is the metadata.name of the referenced
@@ -358,18 +391,20 @@ spec:
be overridden.
properties:
integratedOAuthMetadata:
- description: 'integratedOAuthMetadata contains the discovery endpoint
- data for OAuth 2.0 Authorization Server Metadata for the in-cluster
- integrated OAuth server. This discovery document can be viewed from
- its served location: oc get --raw ''/.well-known/oauth-authorization-server''
- For further details, see the IETF Draft: https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2
- This contains the observed value based on cluster state. An explicitly
- set value in spec.oauthMetadata has precedence over this field.
- This field has no meaning if authentication spec.type is not set
- to IntegratedOAuth. The key "oauthMetadata" is used to locate the
- data. If the config map or expected key is not found, no metadata
- is served. If the specified metadata is not valid, no metadata is
- served. The namespace for this config map is openshift-config-managed.'
+ description: |-
+ integratedOAuthMetadata contains the discovery endpoint data for OAuth 2.0
+ Authorization Server Metadata for the in-cluster integrated OAuth server.
+ This discovery document can be viewed from its served location:
+ oc get --raw '/.well-known/oauth-authorization-server'
+ For further details, see the IETF Draft:
+ https://tools.ietf.org/html/draft-ietf-oauth-discovery-04#section-2
+ This contains the observed value based on cluster state.
+ An explicitly set value in spec.oauthMetadata has precedence over this field.
+ This field has no meaning if authentication spec.type is not set to IntegratedOAuth.
+ The key "oauthMetadata" is used to locate the data.
+ If the config map or expected key is not found, no metadata is served.
+ If the specified metadata is not valid, no metadata is served.
+ The namespace for this config map is openshift-config-managed.
properties:
name:
description: name is the metadata.name of the referenced config
@@ -379,9 +414,9 @@ spec:
- name
type: object
oidcClients:
- description: OIDCClients is where participating operators place the
- current OIDC client status for OIDC clients that can be customized
- by the cluster-admin.
+ description: |-
+ OIDCClients is where participating operators place the current OIDC client status
+ for OIDC clients that can be customized by the cluster-admin.
items:
properties:
componentName:
@@ -397,56 +432,45 @@ spec:
minLength: 1
type: string
conditions:
- description: "Conditions are used to communicate the state of
- the `oidcClients` entry. \n Supported conditions include Available,
- Degraded and Progressing. \n If Available is true, the component
- is successfully using the configured client. If Degraded is
- true, that means something has gone wrong trying to handle
- the client configuration. If Progressing is true, that means
- the component is taking some action related to the `oidcClients`
- entry."
+ description: |-
+ Conditions are used to communicate the state of the `oidcClients` entry.
+
+ Supported conditions include Available, Degraded and Progressing.
+
+ If Available is true, the component is successfully using the configured client.
+ If Degraded is true, that means something has gone wrong trying to handle the client configuration.
+ If Progressing is true, that means the component is taking some action related to the `oidcClients` entry.
items:
- description: "Condition contains details for one aspect of
- the current state of this API Resource. --- This struct
- is intended for direct use as an array at the field path
- .status.conditions. For example, \n type FooStatus struct{
- // Represents the observations of a foo's current state.
- // Known .status.conditions.type are: \"Available\", \"Progressing\",
- and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge
- // +listType=map // +listMapKey=type Conditions []metav1.Condition
- `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\"
- protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields
- }"
+ description: Condition contains details for one aspect of
+ the current state of this API Resource.
properties:
lastTransitionTime:
- description: lastTransitionTime is the last time the condition
- transitioned from one status to another. This should
- be when the underlying condition changed. If that is
- not known, then using the time when the API field changed
- is acceptable.
+ description: |-
+ lastTransitionTime is the last time the condition transitioned from one status to another.
+ This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.
format: date-time
type: string
message:
- description: message is a human readable message indicating
- details about the transition. This may be an empty string.
+ description: |-
+ message is a human readable message indicating details about the transition.
+ This may be an empty string.
maxLength: 32768
type: string
observedGeneration:
- description: observedGeneration represents the .metadata.generation
- that the condition was set based upon. For instance,
- if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration
- is 9, the condition is out of date with respect to the
- current state of the instance.
+ description: |-
+ observedGeneration represents the .metadata.generation that the condition was set based upon.
+ For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
+ with respect to the current state of the instance.
format: int64
minimum: 0
type: integer
reason:
- description: reason contains a programmatic identifier
- indicating the reason for the condition's last transition.
- Producers of specific condition types may define expected
- values and meanings for this field, and whether the
- values are considered a guaranteed API. The value should
- be a CamelCase string. This field may not be empty.
+ description: |-
+ reason contains a programmatic identifier indicating the reason for the condition's last transition.
+ Producers of specific condition types may define expected values and meanings for this field,
+ and whether the values are considered a guaranteed API.
+ The value should be a CamelCase string.
+ This field may not be empty.
maxLength: 1024
minLength: 1
pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
@@ -461,11 +485,6 @@ spec:
type: string
type:
description: type of condition in CamelCase or in foo.example.com/CamelCase.
- --- Many .condition.type values are consistent across
- resources like Available, but because arbitrary conditions
- can be useful (see .node.status.conditions), the ability
- to deconflict is important. The regex it matches is
- (dns1123SubdomainFmt/)?(qualifiedNameFmt)
maxLength: 316
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
@@ -481,8 +500,9 @@ spec:
- type
x-kubernetes-list-type: map
consumingUsers:
- description: ConsumingUsers is a slice of ServiceAccounts that
- need to have read permission on the `clientSecret` secret.
+ description: |-
+ ConsumingUsers is a slice of ServiceAccounts that need to have read
+ permission on the `clientSecret` secret.
items:
description: ConsumingUser is an alias for string which we
add validation to. Currently only service accounts are supported.
@@ -504,7 +524,8 @@ spec:
minLength: 1
type: string
issuerURL:
- description: URL is the serving URL of the token issuer.
+ description: |-
+ URL is the serving URL of the token issuer.
Must use the https:// scheme.
pattern: ^https:\/\/[^\s]
type: string
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_consoles.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_consoles.crd.yaml
index 57c8ee341eaf2db6f7ddf8b2bea8d1d534635dc3..5cad05f15ed1db104d84d97cde267633a5a95a59 100644
--- a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_consoles.crd.yaml
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_consoles.crd.yaml
@@ -20,20 +20,27 @@ spec:
- name: v1
schema:
openAPIV3Schema:
- description: "Console holds cluster-wide configuration for the web console,
- including the logout URL, and reports the public URL of the console. The
- canonical name is `cluster`. \n Compatibility level 1: Stable within a major
- release for a minimum of 12 months or 3 minor releases (whichever is longer)."
+ description: |-
+ Console holds cluster-wide configuration for the web console, including the
+ logout URL, and reports the public URL of the console. The canonical name is
+ `cluster`.
+
+ Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -45,15 +52,17 @@ spec:
for console authentication.
properties:
logoutRedirect:
- description: 'An optional, absolute URL to redirect web browsers
- to after logging out of the console. If not specified, it will
- redirect to the default login page. This is required when using
- an identity provider that supports single sign-on (SSO) such
- as: - OpenID (Keycloak, Azure) - RequestHeader (GSSAPI, SSPI,
- SAML) - OAuth (GitHub, GitLab, Google) Logging out of the console
- will destroy the user''s token. The logoutRedirect provides
- the user the option to perform single logout (SLO) through the
- identity provider to destroy their single sign-on session.'
+ description: |-
+ An optional, absolute URL to redirect web browsers to after logging out of
+ the console. If not specified, it will redirect to the default login page.
+ This is required when using an identity provider that supports single
+ sign-on (SSO) such as:
+ - OpenID (Keycloak, Azure)
+ - RequestHeader (GSSAPI, SSPI, SAML)
+ - OAuth (GitHub, GitLab, Google)
+ Logging out of the console will destroy the user's token. The logoutRedirect
+ provides the user the option to perform single logout (SLO) through the identity
+ provider to destroy their single sign-on session.
pattern: ^$|^((https):\/\/?)[^\s()<>]+(?:\([\w\d]+\)|([^[:punct:]\s]|\/?))$
type: string
type: object
@@ -63,8 +72,9 @@ spec:
be overridden.
properties:
consoleURL:
- description: The URL for the console. This will be derived from the
- host for the route that is created for the console.
+ description: |-
+ The URL for the console. This will be derived from the host for the route that
+ is created for the console.
type: string
type: object
required:
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_dnses.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_dnses.crd.yaml
index 40432b110f092968cacddf857afc82bfef1da8d7..06fb0be0b2d78b0c44afb187b636b68662a06566 100644
--- a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_dnses.crd.yaml
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_dnses.crd.yaml
@@ -20,19 +20,25 @@ spec:
- name: v1
schema:
openAPIV3Schema:
- description: "DNS holds cluster-wide information about DNS. The canonical
- name is `cluster` \n Compatibility level 1: Stable within a major release
- for a minimum of 12 months or 3 minor releases (whichever is longer)."
+ description: |-
+ DNS holds cluster-wide information about DNS. The canonical name is `cluster`
+
+ Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -40,35 +46,41 @@ spec:
description: spec holds user settable values for configuration
properties:
baseDomain:
- description: "baseDomain is the base domain of the cluster. All managed
- DNS records will be sub-domains of this base. \n For example, given
- the base domain `openshift.example.com`, an API server DNS record
- may be created for `cluster-api.openshift.example.com`. \n Once
- set, this field cannot be changed."
+ description: |-
+ baseDomain is the base domain of the cluster. All managed DNS records will
+ be sub-domains of this base.
+
+ For example, given the base domain `openshift.example.com`, an API server
+ DNS record may be created for `cluster-api.openshift.example.com`.
+
+ Once set, this field cannot be changed.
type: string
platform:
- description: platform holds configuration specific to the underlying
- infrastructure provider for DNS. When omitted, this means the user
- has no opinion and the platform is left to choose reasonable defaults.
- These defaults are subject to change over time.
+ description: |-
+ platform holds configuration specific to the underlying
+ infrastructure provider for DNS.
+ When omitted, this means the user has no opinion and the platform is left
+ to choose reasonable defaults. These defaults are subject to change over time.
properties:
aws:
description: aws contains DNS configuration specific to the Amazon
Web Services cloud provider.
properties:
privateZoneIAMRole:
- description: privateZoneIAMRole contains the ARN of an IAM
- role that should be assumed when performing operations on
- the cluster's private hosted zone specified in the cluster
- DNS config. When left empty, no role should be assumed.
+ description: |-
+ privateZoneIAMRole contains the ARN of an IAM role that should be assumed when performing
+ operations on the cluster's private hosted zone specified in the cluster DNS config.
+ When left empty, no role should be assumed.
pattern: ^arn:(aws|aws-cn|aws-us-gov):iam::[0-9]{12}:role\/.*$
type: string
type: object
type:
- description: "type is the underlying infrastructure provider for
- the cluster. Allowed values: \"\", \"AWS\". \n Individual components
- may not support all platforms, and must handle unrecognized
- platforms with best-effort defaults."
+ description: |-
+ type is the underlying infrastructure provider for the cluster.
+ Allowed values: "", "AWS".
+
+ Individual components may not support all platforms,
+ and must handle unrecognized platforms with best-effort defaults.
enum:
- ""
- AWS
@@ -100,49 +112,67 @@ spec:
rule: 'has(self.type) && self.type == ''AWS'' ? has(self.aws) :
!has(self.aws)'
privateZone:
- description: "privateZone is the location where all the DNS records
- that are only available internally to the cluster exist. \n If this
- field is nil, no private records should be created. \n Once set,
- this field cannot be changed."
+ description: |-
+ privateZone is the location where all the DNS records that are only available internally
+ to the cluster exist.
+
+ If this field is nil, no private records should be created.
+
+ Once set, this field cannot be changed.
properties:
id:
- description: "id is the identifier that can be used to find the
- DNS hosted zone. \n on AWS zone can be fetched using `ID` as
- id in [1] on Azure zone can be fetched using `ID` as a pre-determined
- name in [2], on GCP zone can be fetched using `ID` as a pre-determined
- name in [3]. \n [1]: https://docs.aws.amazon.com/cli/latest/reference/route53/get-hosted-zone.html#options
+ description: |-
+ id is the identifier that can be used to find the DNS hosted zone.
+
+ on AWS zone can be fetched using `ID` as id in [1]
+ on Azure zone can be fetched using `ID` as a pre-determined name in [2],
+ on GCP zone can be fetched using `ID` as a pre-determined name in [3].
+
+ [1]: https://docs.aws.amazon.com/cli/latest/reference/route53/get-hosted-zone.html#options
[2]: https://docs.microsoft.com/en-us/cli/azure/network/dns/zone?view=azure-cli-latest#az-network-dns-zone-show
- [3]: https://cloud.google.com/dns/docs/reference/v1/managedZones/get"
+ [3]: https://cloud.google.com/dns/docs/reference/v1/managedZones/get
type: string
tags:
additionalProperties:
type: string
- description: "tags can be used to query the DNS hosted zone. \n
- on AWS, resourcegroupstaggingapi [1] can be used to fetch a
- zone using `Tags` as tag-filters, \n [1]: https://docs.aws.amazon.com/cli/latest/reference/resourcegroupstaggingapi/get-resources.html#options"
+ description: |-
+ tags can be used to query the DNS hosted zone.
+
+ on AWS, resourcegroupstaggingapi [1] can be used to fetch a zone using `Tags` as tag-filters,
+
+ [1]: https://docs.aws.amazon.com/cli/latest/reference/resourcegroupstaggingapi/get-resources.html#options
type: object
type: object
publicZone:
- description: "publicZone is the location where all the DNS records
- that are publicly accessible to the internet exist. \n If this field
- is nil, no public records should be created. \n Once set, this field
- cannot be changed."
+ description: |-
+ publicZone is the location where all the DNS records that are publicly accessible to
+ the internet exist.
+
+ If this field is nil, no public records should be created.
+
+ Once set, this field cannot be changed.
properties:
id:
- description: "id is the identifier that can be used to find the
- DNS hosted zone. \n on AWS zone can be fetched using `ID` as
- id in [1] on Azure zone can be fetched using `ID` as a pre-determined
- name in [2], on GCP zone can be fetched using `ID` as a pre-determined
- name in [3]. \n [1]: https://docs.aws.amazon.com/cli/latest/reference/route53/get-hosted-zone.html#options
+ description: |-
+ id is the identifier that can be used to find the DNS hosted zone.
+
+ on AWS zone can be fetched using `ID` as id in [1]
+ on Azure zone can be fetched using `ID` as a pre-determined name in [2],
+ on GCP zone can be fetched using `ID` as a pre-determined name in [3].
+
+ [1]: https://docs.aws.amazon.com/cli/latest/reference/route53/get-hosted-zone.html#options
[2]: https://docs.microsoft.com/en-us/cli/azure/network/dns/zone?view=azure-cli-latest#az-network-dns-zone-show
- [3]: https://cloud.google.com/dns/docs/reference/v1/managedZones/get"
+ [3]: https://cloud.google.com/dns/docs/reference/v1/managedZones/get
type: string
tags:
additionalProperties:
type: string
- description: "tags can be used to query the DNS hosted zone. \n
- on AWS, resourcegroupstaggingapi [1] can be used to fetch a
- zone using `Tags` as tag-filters, \n [1]: https://docs.aws.amazon.com/cli/latest/reference/resourcegroupstaggingapi/get-resources.html#options"
+ description: |-
+ tags can be used to query the DNS hosted zone.
+
+ on AWS, resourcegroupstaggingapi [1] can be used to fetch a zone using `Tags` as tag-filters,
+
+ [1]: https://docs.aws.amazon.com/cli/latest/reference/resourcegroupstaggingapi/get-resources.html#options
type: object
type: object
type: object
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_featuregates.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_featuregates.crd.yaml
index bc7049cd0a25a47eee3ddd6ce012a2d3d00b6160..55e5ddcb2c693efd5651ce2b4d80b99bbe74aec8 100644
--- a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_featuregates.crd.yaml
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_featuregates.crd.yaml
@@ -20,20 +20,25 @@ spec:
- name: v1
schema:
openAPIV3Schema:
- description: "Feature holds cluster-wide information about feature gates.
- \ The canonical name is `cluster` \n Compatibility level 1: Stable within
- a major release for a minimum of 12 months or 3 minor releases (whichever
- is longer)."
+ description: |-
+ Feature holds cluster-wide information about feature gates. The canonical name is `cluster`
+
+ Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -41,12 +46,10 @@ spec:
description: spec holds user settable values for configuration
properties:
customNoUpgrade:
- description: customNoUpgrade allows the enabling or disabling of any
- feature. Turning this feature set on IS NOT SUPPORTED, CANNOT BE
- UNDONE, and PREVENTS UPGRADES. Because of its nature, this setting
- cannot be validated. If you have any typos or accidentally apply
- invalid combinations your cluster may fail in an unrecoverable way. featureSet
- must equal "CustomNoUpgrade" must be set to use this field.
+ description: |-
+ customNoUpgrade allows the enabling or disabling of any feature. Turning this feature set on IS NOT SUPPORTED, CANNOT BE UNDONE, and PREVENTS UPGRADES.
+ Because of its nature, this setting cannot be validated. If you have any typos or accidentally apply invalid combinations
+ your cluster may fail in an unrecoverable way. featureSet must equal "CustomNoUpgrade" must be set to use this field.
nullable: true
properties:
disabled:
@@ -69,10 +72,9 @@ spec:
type: array
type: object
featureSet:
- description: featureSet changes the list of features in the cluster. The
- default is empty. Be very careful adjusting this setting. Turning
- on or off features may cause irreversible changes in your cluster
- which cannot be undone.
+ description: |-
+ featureSet changes the list of features in the cluster. The default is empty. Be very careful adjusting this setting.
+ Turning on or off features may cause irreversible changes in your cluster which cannot be undone.
enum:
- CustomNoUpgrade
- DevPreviewNoUpgrade
@@ -98,46 +100,39 @@ spec:
be overridden.
properties:
conditions:
- description: 'conditions represent the observations of the current
- state. Known .status.conditions.type are: "DeterminationDegraded"'
+ description: |-
+ conditions represent the observations of the current state.
+ Known .status.conditions.type are: "DeterminationDegraded"
items:
- description: "Condition contains details for one aspect of the current
- state of this API Resource. --- This struct is intended for direct
- use as an array at the field path .status.conditions. For example,
- \n type FooStatus struct{ // Represents the observations of a
- foo's current state. // Known .status.conditions.type are: \"Available\",
- \"Progressing\", and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge
- // +listType=map // +listMapKey=type Conditions []metav1.Condition
- `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\"
- protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields }"
+ description: Condition contains details for one aspect of the current
+ state of this API Resource.
properties:
lastTransitionTime:
- description: lastTransitionTime is the last time the condition
- transitioned from one status to another. This should be when
- the underlying condition changed. If that is not known, then
- using the time when the API field changed is acceptable.
+ description: |-
+ lastTransitionTime is the last time the condition transitioned from one status to another.
+ This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.
format: date-time
type: string
message:
- description: message is a human readable message indicating
- details about the transition. This may be an empty string.
+ description: |-
+ message is a human readable message indicating details about the transition.
+ This may be an empty string.
maxLength: 32768
type: string
observedGeneration:
- description: observedGeneration represents the .metadata.generation
- that the condition was set based upon. For instance, if .metadata.generation
- is currently 12, but the .status.conditions[x].observedGeneration
- is 9, the condition is out of date with respect to the current
- state of the instance.
+ description: |-
+ observedGeneration represents the .metadata.generation that the condition was set based upon.
+ For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
+ with respect to the current state of the instance.
format: int64
minimum: 0
type: integer
reason:
- description: reason contains a programmatic identifier indicating
- the reason for the condition's last transition. Producers
- of specific condition types may define expected values and
- meanings for this field, and whether the values are considered
- a guaranteed API. The value should be a CamelCase string.
+ description: |-
+ reason contains a programmatic identifier indicating the reason for the condition's last transition.
+ Producers of specific condition types may define expected values and meanings for this field,
+ and whether the values are considered a guaranteed API.
+ The value should be a CamelCase string.
This field may not be empty.
maxLength: 1024
minLength: 1
@@ -152,10 +147,6 @@ spec:
type: string
type:
description: type of condition in CamelCase or in foo.example.com/CamelCase.
- --- Many .condition.type values are consistent across resources
- like Available, but because arbitrary conditions can be useful
- (see .node.status.conditions), the ability to deconflict is
- important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
maxLength: 316
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
@@ -171,18 +162,15 @@ spec:
- type
x-kubernetes-list-type: map
featureGates:
- description: featureGates contains a list of enabled and disabled
- featureGates that are keyed by payloadVersion. Operators other than
- the CVO and cluster-config-operator, must read the .status.featureGates,
- locate the version they are managing, find the enabled/disabled
- featuregates and make the operand and operator match. The enabled/disabled
- values for a particular version may change during the life of the
- cluster as various .spec.featureSet values are selected. Operators
- may choose to restart their processes to pick up these changes,
- but remembering past enable/disable lists is beyond the scope of
- this API and is the responsibility of individual operators. Only
- featureGates with .version in the ClusterVersion.status will be
- present in this list.
+ description: |-
+ featureGates contains a list of enabled and disabled featureGates that are keyed by payloadVersion.
+ Operators other than the CVO and cluster-config-operator, must read the .status.featureGates, locate
+ the version they are managing, find the enabled/disabled featuregates and make the operand and operator match.
+ The enabled/disabled values for a particular version may change during the life of the cluster as various
+ .spec.featureSet values are selected.
+ Operators may choose to restart their processes to pick up these changes, but remembering past enable/disable
+ lists is beyond the scope of this API and is the responsibility of individual operators.
+ Only featureGates with .version in the ClusterVersion.status will be present in this list.
items:
properties:
disabled:
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_imagecontentpolicies.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_imagecontentpolicies.crd.yaml
index d9c1fb40f75a0ca79533d72efeecae32b394cca5..16ff1fe8da5a73152df594e0808f573125d68b4b 100644
--- a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_imagecontentpolicies.crd.yaml
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_imagecontentpolicies.crd.yaml
@@ -20,21 +20,26 @@ spec:
- name: v1
schema:
openAPIV3Schema:
- description: "ImageContentPolicy holds cluster-wide information about how
- to handle registry mirror rules. When multiple policies are defined, the
- outcome of the behavior is defined on each field. \n Compatibility level
- 1: Stable within a major release for a minimum of 12 months or 3 minor releases
- (whichever is longer)."
+ description: |-
+ ImageContentPolicy holds cluster-wide information about how to handle registry mirror rules.
+ When multiple policies are defined, the outcome of the behavior is defined on each field.
+
+ Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -42,50 +47,45 @@ spec:
description: spec holds user settable values for configuration
properties:
repositoryDigestMirrors:
- description: "repositoryDigestMirrors allows images referenced by
- image digests in pods to be pulled from alternative mirrored repository
- locations. The image pull specification provided to the pod will
- be compared to the source locations described in RepositoryDigestMirrors
- and the image may be pulled down from any of the mirrors in the
- list instead of the specified repository allowing administrators
- to choose a potentially faster mirror. To pull image from mirrors
- by tags, should set the \"allowMirrorByTags\". \n Each “sourceâ€
- repository is treated independently; configurations for different
- “source†repositories don’t interact. \n If the \"mirrors\" is not
- specified, the image will continue to be pulled from the specified
- repository in the pull spec. \n When multiple policies are defined
- for the same “source†repository, the sets of defined mirrors will
- be merged together, preserving the relative order of the mirrors,
- if possible. For example, if policy A has mirrors `a, b, c` and
- policy B has mirrors `c, d, e`, the mirrors will be used in the
- order `a, b, c, d, e`. If the orders of mirror entries conflict
- (e.g. `a, b` vs. `b, a`) the configuration is not rejected but the
- resulting order is unspecified."
+ description: |-
+ repositoryDigestMirrors allows images referenced by image digests in pods to be
+ pulled from alternative mirrored repository locations. The image pull specification
+ provided to the pod will be compared to the source locations described in RepositoryDigestMirrors
+ and the image may be pulled down from any of the mirrors in the list instead of the
+ specified repository allowing administrators to choose a potentially faster mirror.
+ To pull image from mirrors by tags, should set the "allowMirrorByTags".
+
+ Each “source†repository is treated independently; configurations for different “sourceâ€
+ repositories don’t interact.
+
+ If the "mirrors" is not specified, the image will continue to be pulled from the specified
+ repository in the pull spec.
+
+ When multiple policies are defined for the same “source†repository, the sets of defined
+ mirrors will be merged together, preserving the relative order of the mirrors, if possible.
+ For example, if policy A has mirrors `a, b, c` and policy B has mirrors `c, d, e`, the
+ mirrors will be used in the order `a, b, c, d, e`. If the orders of mirror entries conflict
+ (e.g. `a, b` vs. `b, a`) the configuration is not rejected but the resulting order is unspecified.
items:
description: RepositoryDigestMirrors holds cluster-wide information
about how to handle mirrors in the registries config.
properties:
allowMirrorByTags:
- description: allowMirrorByTags if true, the mirrors can be used
- to pull the images that are referenced by their tags. Default
- is false, the mirrors only work when pulling the images that
- are referenced by their digests. Pulling images by tag can
- potentially yield different images, depending on which endpoint
- we pull from. Forcing digest-pulls for mirrors avoids that
- issue.
+ description: |-
+ allowMirrorByTags if true, the mirrors can be used to pull the images that are referenced by their tags. Default is false, the mirrors only work when pulling the images that are referenced by their digests.
+ Pulling images by tag can potentially yield different images, depending on which endpoint
+ we pull from. Forcing digest-pulls for mirrors avoids that issue.
type: boolean
mirrors:
- description: mirrors is zero or more repositories that may also
- contain the same images. If the "mirrors" is not specified,
- the image will continue to be pulled from the specified repository
- in the pull spec. No mirror will be configured. The order
- of mirrors in this list is treated as the user's desired priority,
- while source is by default considered lower priority than
- all mirrors. Other cluster configuration, including (but not
- limited to) other repositoryDigestMirrors objects, may impact
- the exact order mirrors are contacted in, or some mirrors
- may be contacted in parallel, so this should be considered
- a preference rather than a guarantee of ordering.
+ description: |-
+ mirrors is zero or more repositories that may also contain the same images.
+ If the "mirrors" is not specified, the image will continue to be pulled from the specified
+ repository in the pull spec. No mirror will be configured.
+ The order of mirrors in this list is treated as the user's desired priority, while source
+ is by default considered lower priority than all mirrors. Other cluster configuration,
+ including (but not limited to) other repositoryDigestMirrors objects,
+ may impact the exact order mirrors are contacted in, or some mirrors may be contacted
+ in parallel, so this should be considered a preference rather than a guarantee of ordering.
items:
pattern: ^(([a-zA-Z]|[a-zA-Z][a-zA-Z0-9\-]*[a-zA-Z0-9])\.)*([A-Za-z]|[A-Za-z][A-Za-z0-9\-]*[A-Za-z0-9])(:[0-9]+)?(\/[^\/:\n]+)*(\/[^\/:\n]+((:[^\/:\n]+)|(@[^\n]+)))?$
type: string
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_imagedigestmirrorsets.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_imagedigestmirrorsets.crd.yaml
index 984aa93786e59303ab791e39d657f2fa65b4d80b..b223ecda6822d96c869c500ba775d10f057f3ea6 100644
--- a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_imagedigestmirrorsets.crd.yaml
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_imagedigestmirrorsets.crd.yaml
@@ -22,21 +22,26 @@ spec:
- name: v1
schema:
openAPIV3Schema:
- description: "ImageDigestMirrorSet holds cluster-wide information about how
- to handle registry mirror rules on using digest pull specification. When
- multiple policies are defined, the outcome of the behavior is defined on
- each field. \n Compatibility level 1: Stable within a major release for
- a minimum of 12 months or 3 minor releases (whichever is longer)."
+ description: |-
+ ImageDigestMirrorSet holds cluster-wide information about how to handle registry mirror rules on using digest pull specification.
+ When multiple policies are defined, the outcome of the behavior is defined on each field.
+
+ Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -44,84 +49,82 @@ spec:
description: spec holds user settable values for configuration
properties:
imageDigestMirrors:
- description: "imageDigestMirrors allows images referenced by image
- digests in pods to be pulled from alternative mirrored repository
- locations. The image pull specification provided to the pod will
- be compared to the source locations described in imageDigestMirrors
- and the image may be pulled down from any of the mirrors in the
- list instead of the specified repository allowing administrators
- to choose a potentially faster mirror. To use mirrors to pull images
- using tag specification, users should configure a list of mirrors
- using \"ImageTagMirrorSet\" CRD. \n If the image pull specification
- matches the repository of \"source\" in multiple imagedigestmirrorset
- objects, only the objects which define the most specific namespace
- match will be used. For example, if there are objects using quay.io/libpod
- and quay.io/libpod/busybox as the \"source\", only the objects using
- quay.io/libpod/busybox are going to apply for pull specification
- quay.io/libpod/busybox. Each “source†repository is treated independently;
- configurations for different “source†repositories don’t interact.
- \n If the \"mirrors\" is not specified, the image will continue
- to be pulled from the specified repository in the pull spec. \n
- When multiple policies are defined for the same “source†repository,
- the sets of defined mirrors will be merged together, preserving
- the relative order of the mirrors, if possible. For example, if
- policy A has mirrors `a, b, c` and policy B has mirrors `c, d, e`,
- the mirrors will be used in the order `a, b, c, d, e`. If the orders
- of mirror entries conflict (e.g. `a, b` vs. `b, a`) the configuration
- is not rejected but the resulting order is unspecified. Users who
- want to use a specific order of mirrors, should configure them into
- one list of mirrors using the expected order."
+ description: |-
+ imageDigestMirrors allows images referenced by image digests in pods to be
+ pulled from alternative mirrored repository locations. The image pull specification
+ provided to the pod will be compared to the source locations described in imageDigestMirrors
+ and the image may be pulled down from any of the mirrors in the list instead of the
+ specified repository allowing administrators to choose a potentially faster mirror.
+ To use mirrors to pull images using tag specification, users should configure
+ a list of mirrors using "ImageTagMirrorSet" CRD.
+
+ If the image pull specification matches the repository of "source" in multiple imagedigestmirrorset objects,
+ only the objects which define the most specific namespace match will be used.
+ For example, if there are objects using quay.io/libpod and quay.io/libpod/busybox as
+ the "source", only the objects using quay.io/libpod/busybox are going to apply
+ for pull specification quay.io/libpod/busybox.
+ Each “source†repository is treated independently; configurations for different “sourceâ€
+ repositories don’t interact.
+
+ If the "mirrors" is not specified, the image will continue to be pulled from the specified
+ repository in the pull spec.
+
+ When multiple policies are defined for the same “source†repository, the sets of defined
+ mirrors will be merged together, preserving the relative order of the mirrors, if possible.
+ For example, if policy A has mirrors `a, b, c` and policy B has mirrors `c, d, e`, the
+ mirrors will be used in the order `a, b, c, d, e`. If the orders of mirror entries conflict
+ (e.g. `a, b` vs. `b, a`) the configuration is not rejected but the resulting order is unspecified.
+ Users who want to use a specific order of mirrors, should configure them into one list of mirrors using the expected order.
items:
description: ImageDigestMirrors holds cluster-wide information about
how to handle mirrors in the registries config.
properties:
mirrorSourcePolicy:
- description: mirrorSourcePolicy defines the fallback policy
- if fails to pull image from the mirrors. If unset, the image
- will continue to be pulled from the the repository in the
- pull spec. sourcePolicy is valid configuration only when one
- or more mirrors are in the mirror list.
+ description: |-
+ mirrorSourcePolicy defines the fallback policy if fails to pull image from the mirrors.
+ If unset, the image will continue to be pulled from the the repository in the pull spec.
+ sourcePolicy is valid configuration only when one or more mirrors are in the mirror list.
enum:
- NeverContactSource
- AllowContactingSource
type: string
mirrors:
- description: 'mirrors is zero or more locations that may also
- contain the same images. No mirror will be configured if not
- specified. Images can be pulled from these mirrors only if
- they are referenced by their digests. The mirrored location
- is obtained by replacing the part of the input reference that
- matches source by the mirrors entry, e.g. for registry.redhat.io/product/repo
- reference, a (source, mirror) pair *.redhat.io, mirror.local/redhat
- causes a mirror.local/redhat/product/repo repository to be
- used. The order of mirrors in this list is treated as the
- user''s desired priority, while source is by default considered
- lower priority than all mirrors. If no mirror is specified
- or all image pulls from the mirror list fail, the image will
- continue to be pulled from the repository in the pull spec
- unless explicitly prohibited by "mirrorSourcePolicy" Other
- cluster configuration, including (but not limited to) other
- imageDigestMirrors objects, may impact the exact order mirrors
- are contacted in, or some mirrors may be contacted in parallel,
- so this should be considered a preference rather than a guarantee
- of ordering. "mirrors" uses one of the following formats:
- host[:port] host[:port]/namespace[/namespace…] host[:port]/namespace[/namespace…]/repo
- for more information about the format, see the document about
- the location field: https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md#choosing-a-registry-toml-table'
+ description: |-
+ mirrors is zero or more locations that may also contain the same images. No mirror will be configured if not specified.
+ Images can be pulled from these mirrors only if they are referenced by their digests.
+ The mirrored location is obtained by replacing the part of the input reference that
+ matches source by the mirrors entry, e.g. for registry.redhat.io/product/repo reference,
+ a (source, mirror) pair *.redhat.io, mirror.local/redhat causes a mirror.local/redhat/product/repo
+ repository to be used.
+ The order of mirrors in this list is treated as the user's desired priority, while source
+ is by default considered lower priority than all mirrors.
+ If no mirror is specified or all image pulls from the mirror list fail, the image will continue to be
+ pulled from the repository in the pull spec unless explicitly prohibited by "mirrorSourcePolicy"
+ Other cluster configuration, including (but not limited to) other imageDigestMirrors objects,
+ may impact the exact order mirrors are contacted in, or some mirrors may be contacted
+ in parallel, so this should be considered a preference rather than a guarantee of ordering.
+ "mirrors" uses one of the following formats:
+ host[:port]
+ host[:port]/namespace[/namespace…]
+ host[:port]/namespace[/namespace…]/repo
+ for more information about the format, see the document about the location field:
+ https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md#choosing-a-registry-toml-table
items:
pattern: ^((?:[a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9])(?:(?:\.(?:[a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9]))+)?(?::[0-9]+)?)(?:(?:/[a-z0-9]+(?:(?:(?:[._]|__|[-]*)[a-z0-9]+)+)?)+)?$
type: string
type: array
x-kubernetes-list-type: set
source:
- description: 'source matches the repository that users refer
- to, e.g. in image pull specifications. Setting source to a
- registry hostname e.g. docker.io. quay.io, or registry.redhat.io,
- will match the image pull specification of corressponding
- registry. "source" uses one of the following formats: host[:port]
- host[:port]/namespace[/namespace…] host[:port]/namespace[/namespace…]/repo
- [*.]host for more information about the format, see the document
- about the location field: https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md#choosing-a-registry-toml-table'
+ description: |-
+ source matches the repository that users refer to, e.g. in image pull specifications. Setting source to a registry hostname
+ e.g. docker.io. quay.io, or registry.redhat.io, will match the image pull specification of corressponding registry.
+ "source" uses one of the following formats:
+ host[:port]
+ host[:port]/namespace[/namespace…]
+ host[:port]/namespace[/namespace…]/repo
+ [*.]host
+ for more information about the format, see the document about the location field:
+ https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md#choosing-a-registry-toml-table
pattern: ^\*(?:\.(?:[a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9]))+$|^((?:[a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9])(?:(?:\.(?:[a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9]))+)?(?::[0-9]+)?)(?:(?:/[a-z0-9]+(?:(?:(?:[._]|__|[-]*)[a-z0-9]+)+)?)+)?$
type: string
required:
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_images-CustomNoUpgrade.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_images-CustomNoUpgrade.crd.yaml
index 5a188f0bf409d3fef7a20e5b72fc79bf9146f36c..67e097af3615bb7407b2b0653ea7e70a9932d407 100644
--- a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_images-CustomNoUpgrade.crd.yaml
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_images-CustomNoUpgrade.crd.yaml
@@ -21,24 +21,30 @@ spec:
- name: v1
schema:
openAPIV3Schema:
- description: "Image governs policies related to imagestream imports and runtime
- configuration for external registries. It allows cluster admins to configure
- which registries OpenShift is allowed to import images from, extra CA trust
- bundles for external registries, and policies to block or allow registry
- hostnames. When exposing OpenShift's image registry to the public, this
- also lets cluster admins specify the external hostname. \n Compatibility
- level 1: Stable within a major release for a minimum of 12 months or 3 minor
- releases (whichever is longer)."
+ description: |-
+ Image governs policies related to imagestream imports and runtime configuration
+ for external registries. It allows cluster admins to configure which registries
+ OpenShift is allowed to import images from, extra CA trust bundles for external
+ registries, and policies to block or allow registry hostnames.
+ When exposing OpenShift's image registry to the public, this also lets cluster
+ admins specify the external hostname.
+
+ Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -46,9 +52,10 @@ spec:
description: spec holds user settable values for configuration
properties:
additionalTrustedCA:
- description: additionalTrustedCA is a reference to a ConfigMap containing
- additional CAs that should be trusted during imagestream import,
- pod image pull, build image pull, and imageregistry pullthrough.
+ description: |-
+ additionalTrustedCA is a reference to a ConfigMap containing additional CAs that
+ should be trusted during imagestream import, pod image pull, build image pull, and
+ imageregistry pullthrough.
The namespace for this config map is openshift-config.
properties:
name:
@@ -59,93 +66,90 @@ spec:
- name
type: object
allowedRegistriesForImport:
- description: allowedRegistriesForImport limits the container image
- registries that normal users may import images from. Set this list
- to the registries that you trust to contain valid Docker images
- and that you want applications to be able to import from. Users
- with permission to create Images or ImageStreamMappings via the
- API are not affected by this policy - typically only administrators
- or system integrations will have those permissions.
+ description: |-
+ allowedRegistriesForImport limits the container image registries that normal users may import
+ images from. Set this list to the registries that you trust to contain valid Docker
+ images and that you want applications to be able to import from. Users with
+ permission to create Images or ImageStreamMappings via the API are not affected by
+ this policy - typically only administrators or system integrations will have those
+ permissions.
items:
- description: RegistryLocation contains a location of the registry
- specified by the registry domain name. The domain name might include
- wildcards, like '*' or '??'.
+ description: |-
+ RegistryLocation contains a location of the registry specified by the registry domain
+ name. The domain name might include wildcards, like '*' or '??'.
properties:
domainName:
- description: domainName specifies a domain name for the registry
- In case the registry use non-standard (80 or 443) port, the
- port should be included in the domain name as well.
+ description: |-
+ domainName specifies a domain name for the registry
+ In case the registry use non-standard (80 or 443) port, the port should be included
+ in the domain name as well.
type: string
insecure:
- description: insecure indicates whether the registry is secure
- (https) or insecure (http) By default (if not specified) the
- registry is assumed as secure.
+ description: |-
+ insecure indicates whether the registry is secure (https) or insecure (http)
+ By default (if not specified) the registry is assumed as secure.
type: boolean
type: object
type: array
x-kubernetes-list-type: atomic
externalRegistryHostnames:
- description: externalRegistryHostnames provides the hostnames for
- the default external image registry. The external hostname should
- be set only when the image registry is exposed externally. The first
- value is used in 'publicDockerImageRepository' field in ImageStreams.
- The value must be in "hostname[:port]" format.
+ description: |-
+ externalRegistryHostnames provides the hostnames for the default external image
+ registry. The external hostname should be set only when the image registry
+ is exposed externally. The first value is used in 'publicDockerImageRepository'
+ field in ImageStreams. The value must be in "hostname[:port]" format.
items:
type: string
type: array
x-kubernetes-list-type: atomic
imageStreamImportMode:
- description: 'imageStreamImportMode controls the import mode behaviour
- of imagestreams. It can be set to `Legacy` or `PreserveOriginal`
- or the empty string. If this value is specified, this setting is
- applied to all newly created imagestreams which do not have the
- value set. `Legacy` indicates that the legacy behaviour should be
- used. For manifest lists, the legacy behaviour will discard the
- manifest list and import a single sub-manifest. In this case, the
- platform is chosen in the following order of priority: 1. tag annotations;
- 2. control plane arch/os; 3. linux/amd64; 4. the first manifest
- in the list. `PreserveOriginal` indicates that the original manifest
- will be preserved. For manifest lists, the manifest list and all
- its sub-manifests will be imported. When empty, the behaviour will
- be decided based on the payload type advertised by the ClusterVersion
- status, i.e single arch payload implies the import mode is Legacy
- and multi payload implies PreserveOriginal.'
+ description: |-
+ imageStreamImportMode controls the import mode behaviour of imagestreams.
+ It can be set to `Legacy` or `PreserveOriginal` or the empty string. If this value
+ is specified, this setting is applied to all newly created imagestreams which do not have the
+ value set. `Legacy` indicates that the legacy behaviour should be used.
+ For manifest lists, the legacy behaviour will discard the manifest list and import a single
+ sub-manifest. In this case, the platform is chosen in the following order of priority:
+ 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list.
+ `PreserveOriginal` indicates that the original manifest will be preserved. For manifest lists,
+ the manifest list and all its sub-manifests will be imported. When empty, the behaviour will be
+ decided based on the payload type advertised by the ClusterVersion status, i.e single arch payload
+ implies the import mode is Legacy and multi payload implies PreserveOriginal.
enum:
- ""
- Legacy
- PreserveOriginal
type: string
registrySources:
- description: registrySources contains configuration that determines
- how the container runtime should treat individual registries when
- accessing images for builds+pods. (e.g. whether or not to allow
- insecure access). It does not contain configuration for the internal
- cluster registry.
+ description: |-
+ registrySources contains configuration that determines how the container runtime
+ should treat individual registries when accessing images for builds+pods. (e.g.
+ whether or not to allow insecure access). It does not contain configuration for the
+ internal cluster registry.
properties:
allowedRegistries:
- description: "allowedRegistries are the only registries permitted
- for image pull and push actions. All other registries are denied.
- \n Only one of BlockedRegistries or AllowedRegistries may be
- set."
+ description: |-
+ allowedRegistries are the only registries permitted for image pull and push actions. All other registries are denied.
+
+ Only one of BlockedRegistries or AllowedRegistries may be set.
items:
type: string
type: array
x-kubernetes-list-type: atomic
blockedRegistries:
- description: "blockedRegistries cannot be used for image pull
- and push actions. All other registries are permitted. \n Only
- one of BlockedRegistries or AllowedRegistries may be set."
+ description: |-
+ blockedRegistries cannot be used for image pull and push actions. All other registries are permitted.
+
+ Only one of BlockedRegistries or AllowedRegistries may be set.
items:
type: string
type: array
x-kubernetes-list-type: atomic
containerRuntimeSearchRegistries:
- description: 'containerRuntimeSearchRegistries are registries
- that will be searched when pulling images that do not have fully
- qualified domains in their pull specs. Registries will be searched
- in the order provided in the list. Note: this search list only
- works with the container runtime, i.e CRI-O. Will NOT work with
- builds or imagestream imports.'
+ description: |-
+ containerRuntimeSearchRegistries are registries that will be searched when pulling images that do not have fully qualified
+ domains in their pull specs. Registries will be searched in the order provided in the list.
+ Note: this search list only works with the container runtime, i.e CRI-O. Will NOT work with builds or imagestream imports.
format: hostname
items:
type: string
@@ -166,40 +170,38 @@ spec:
be overridden.
properties:
externalRegistryHostnames:
- description: externalRegistryHostnames provides the hostnames for
- the default external image registry. The external hostname should
- be set only when the image registry is exposed externally. The first
- value is used in 'publicDockerImageRepository' field in ImageStreams.
- The value must be in "hostname[:port]" format.
+ description: |-
+ externalRegistryHostnames provides the hostnames for the default external image
+ registry. The external hostname should be set only when the image registry
+ is exposed externally. The first value is used in 'publicDockerImageRepository'
+ field in ImageStreams. The value must be in "hostname[:port]" format.
items:
type: string
type: array
x-kubernetes-list-type: atomic
imageStreamImportMode:
- description: 'imageStreamImportMode controls the import mode behaviour
- of imagestreams. It can be `Legacy` or `PreserveOriginal`. `Legacy`
- indicates that the legacy behaviour should be used. For manifest
- lists, the legacy behaviour will discard the manifest list and import
- a single sub-manifest. In this case, the platform is chosen in the
- following order of priority: 1. tag annotations; 2. control plane
- arch/os; 3. linux/amd64; 4. the first manifest in the list. `PreserveOriginal`
- indicates that the original manifest will be preserved. For manifest
- lists, the manifest list and all its sub-manifests will be imported.
- This value will be reconciled based on either the spec value or
- if no spec value is specified, the image registry operator would
- look at the ClusterVersion status to determine the payload type
- and set the import mode accordingly, i.e single arch payload implies
- the import mode is Legacy and multi payload implies PreserveOriginal.'
+ description: |-
+ imageStreamImportMode controls the import mode behaviour of imagestreams. It can be
+ `Legacy` or `PreserveOriginal`. `Legacy` indicates that the legacy behaviour should be used.
+ For manifest lists, the legacy behaviour will discard the manifest list and import a single
+ sub-manifest. In this case, the platform is chosen in the following order of priority:
+ 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list.
+ `PreserveOriginal` indicates that the original manifest will be preserved. For manifest lists,
+ the manifest list and all its sub-manifests will be imported. This value will be reconciled based
+ on either the spec value or if no spec value is specified, the image registry operator would look
+ at the ClusterVersion status to determine the payload type and set the import mode accordingly,
+ i.e single arch payload implies the import mode is Legacy and multi payload implies PreserveOriginal.
enum:
- ""
- Legacy
- PreserveOriginal
type: string
internalRegistryHostname:
- description: internalRegistryHostname sets the hostname for the default
- internal image registry. The value must be in "hostname[:port]"
- format. This value is set by the image registry operator which controls
- the internal registry hostname.
+ description: |-
+ internalRegistryHostname sets the hostname for the default internal image
+ registry. The value must be in "hostname[:port]" format.
+ This value is set by the image registry operator which controls the internal registry
+ hostname.
type: string
type: object
required:
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_images-Default.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_images-Default.crd.yaml
index 0b62838deeb043f7d8833579743c36bb54dc99db..a622c7d37f17233cd21457ede8177f13a6fa5fd6 100644
--- a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_images-Default.crd.yaml
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_images-Default.crd.yaml
@@ -21,24 +21,30 @@ spec:
- name: v1
schema:
openAPIV3Schema:
- description: "Image governs policies related to imagestream imports and runtime
- configuration for external registries. It allows cluster admins to configure
- which registries OpenShift is allowed to import images from, extra CA trust
- bundles for external registries, and policies to block or allow registry
- hostnames. When exposing OpenShift's image registry to the public, this
- also lets cluster admins specify the external hostname. \n Compatibility
- level 1: Stable within a major release for a minimum of 12 months or 3 minor
- releases (whichever is longer)."
+ description: |-
+ Image governs policies related to imagestream imports and runtime configuration
+ for external registries. It allows cluster admins to configure which registries
+ OpenShift is allowed to import images from, extra CA trust bundles for external
+ registries, and policies to block or allow registry hostnames.
+ When exposing OpenShift's image registry to the public, this also lets cluster
+ admins specify the external hostname.
+
+ Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -46,9 +52,10 @@ spec:
description: spec holds user settable values for configuration
properties:
additionalTrustedCA:
- description: additionalTrustedCA is a reference to a ConfigMap containing
- additional CAs that should be trusted during imagestream import,
- pod image pull, build image pull, and imageregistry pullthrough.
+ description: |-
+ additionalTrustedCA is a reference to a ConfigMap containing additional CAs that
+ should be trusted during imagestream import, pod image pull, build image pull, and
+ imageregistry pullthrough.
The namespace for this config map is openshift-config.
properties:
name:
@@ -59,72 +66,72 @@ spec:
- name
type: object
allowedRegistriesForImport:
- description: allowedRegistriesForImport limits the container image
- registries that normal users may import images from. Set this list
- to the registries that you trust to contain valid Docker images
- and that you want applications to be able to import from. Users
- with permission to create Images or ImageStreamMappings via the
- API are not affected by this policy - typically only administrators
- or system integrations will have those permissions.
+ description: |-
+ allowedRegistriesForImport limits the container image registries that normal users may import
+ images from. Set this list to the registries that you trust to contain valid Docker
+ images and that you want applications to be able to import from. Users with
+ permission to create Images or ImageStreamMappings via the API are not affected by
+ this policy - typically only administrators or system integrations will have those
+ permissions.
items:
- description: RegistryLocation contains a location of the registry
- specified by the registry domain name. The domain name might include
- wildcards, like '*' or '??'.
+ description: |-
+ RegistryLocation contains a location of the registry specified by the registry domain
+ name. The domain name might include wildcards, like '*' or '??'.
properties:
domainName:
- description: domainName specifies a domain name for the registry
- In case the registry use non-standard (80 or 443) port, the
- port should be included in the domain name as well.
+ description: |-
+ domainName specifies a domain name for the registry
+ In case the registry use non-standard (80 or 443) port, the port should be included
+ in the domain name as well.
type: string
insecure:
- description: insecure indicates whether the registry is secure
- (https) or insecure (http) By default (if not specified) the
- registry is assumed as secure.
+ description: |-
+ insecure indicates whether the registry is secure (https) or insecure (http)
+ By default (if not specified) the registry is assumed as secure.
type: boolean
type: object
type: array
x-kubernetes-list-type: atomic
externalRegistryHostnames:
- description: externalRegistryHostnames provides the hostnames for
- the default external image registry. The external hostname should
- be set only when the image registry is exposed externally. The first
- value is used in 'publicDockerImageRepository' field in ImageStreams.
- The value must be in "hostname[:port]" format.
+ description: |-
+ externalRegistryHostnames provides the hostnames for the default external image
+ registry. The external hostname should be set only when the image registry
+ is exposed externally. The first value is used in 'publicDockerImageRepository'
+ field in ImageStreams. The value must be in "hostname[:port]" format.
items:
type: string
type: array
x-kubernetes-list-type: atomic
registrySources:
- description: registrySources contains configuration that determines
- how the container runtime should treat individual registries when
- accessing images for builds+pods. (e.g. whether or not to allow
- insecure access). It does not contain configuration for the internal
- cluster registry.
+ description: |-
+ registrySources contains configuration that determines how the container runtime
+ should treat individual registries when accessing images for builds+pods. (e.g.
+ whether or not to allow insecure access). It does not contain configuration for the
+ internal cluster registry.
properties:
allowedRegistries:
- description: "allowedRegistries are the only registries permitted
- for image pull and push actions. All other registries are denied.
- \n Only one of BlockedRegistries or AllowedRegistries may be
- set."
+ description: |-
+ allowedRegistries are the only registries permitted for image pull and push actions. All other registries are denied.
+
+ Only one of BlockedRegistries or AllowedRegistries may be set.
items:
type: string
type: array
x-kubernetes-list-type: atomic
blockedRegistries:
- description: "blockedRegistries cannot be used for image pull
- and push actions. All other registries are permitted. \n Only
- one of BlockedRegistries or AllowedRegistries may be set."
+ description: |-
+ blockedRegistries cannot be used for image pull and push actions. All other registries are permitted.
+
+ Only one of BlockedRegistries or AllowedRegistries may be set.
items:
type: string
type: array
x-kubernetes-list-type: atomic
containerRuntimeSearchRegistries:
- description: 'containerRuntimeSearchRegistries are registries
- that will be searched when pulling images that do not have fully
- qualified domains in their pull specs. Registries will be searched
- in the order provided in the list. Note: this search list only
- works with the container runtime, i.e CRI-O. Will NOT work with
- builds or imagestream imports.'
+ description: |-
+ containerRuntimeSearchRegistries are registries that will be searched when pulling images that do not have fully qualified
+ domains in their pull specs. Registries will be searched in the order provided in the list.
+ Note: this search list only works with the container runtime, i.e CRI-O. Will NOT work with builds or imagestream imports.
format: hostname
items:
type: string
@@ -145,20 +152,21 @@ spec:
be overridden.
properties:
externalRegistryHostnames:
- description: externalRegistryHostnames provides the hostnames for
- the default external image registry. The external hostname should
- be set only when the image registry is exposed externally. The first
- value is used in 'publicDockerImageRepository' field in ImageStreams.
- The value must be in "hostname[:port]" format.
+ description: |-
+ externalRegistryHostnames provides the hostnames for the default external image
+ registry. The external hostname should be set only when the image registry
+ is exposed externally. The first value is used in 'publicDockerImageRepository'
+ field in ImageStreams. The value must be in "hostname[:port]" format.
items:
type: string
type: array
x-kubernetes-list-type: atomic
internalRegistryHostname:
- description: internalRegistryHostname sets the hostname for the default
- internal image registry. The value must be in "hostname[:port]"
- format. This value is set by the image registry operator which controls
- the internal registry hostname.
+ description: |-
+ internalRegistryHostname sets the hostname for the default internal image
+ registry. The value must be in "hostname[:port]" format.
+ This value is set by the image registry operator which controls the internal registry
+ hostname.
type: string
type: object
required:
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_images-DevPreviewNoUpgrade.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_images-DevPreviewNoUpgrade.crd.yaml
index dcd2e2f8e313cc0872bc7d4ab12cab699e79e8d0..89ad329c749a7c512707b057e4d0bc07d5443f9a 100644
--- a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_images-DevPreviewNoUpgrade.crd.yaml
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_images-DevPreviewNoUpgrade.crd.yaml
@@ -21,24 +21,30 @@ spec:
- name: v1
schema:
openAPIV3Schema:
- description: "Image governs policies related to imagestream imports and runtime
- configuration for external registries. It allows cluster admins to configure
- which registries OpenShift is allowed to import images from, extra CA trust
- bundles for external registries, and policies to block or allow registry
- hostnames. When exposing OpenShift's image registry to the public, this
- also lets cluster admins specify the external hostname. \n Compatibility
- level 1: Stable within a major release for a minimum of 12 months or 3 minor
- releases (whichever is longer)."
+ description: |-
+ Image governs policies related to imagestream imports and runtime configuration
+ for external registries. It allows cluster admins to configure which registries
+ OpenShift is allowed to import images from, extra CA trust bundles for external
+ registries, and policies to block or allow registry hostnames.
+ When exposing OpenShift's image registry to the public, this also lets cluster
+ admins specify the external hostname.
+
+ Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -46,9 +52,10 @@ spec:
description: spec holds user settable values for configuration
properties:
additionalTrustedCA:
- description: additionalTrustedCA is a reference to a ConfigMap containing
- additional CAs that should be trusted during imagestream import,
- pod image pull, build image pull, and imageregistry pullthrough.
+ description: |-
+ additionalTrustedCA is a reference to a ConfigMap containing additional CAs that
+ should be trusted during imagestream import, pod image pull, build image pull, and
+ imageregistry pullthrough.
The namespace for this config map is openshift-config.
properties:
name:
@@ -59,93 +66,90 @@ spec:
- name
type: object
allowedRegistriesForImport:
- description: allowedRegistriesForImport limits the container image
- registries that normal users may import images from. Set this list
- to the registries that you trust to contain valid Docker images
- and that you want applications to be able to import from. Users
- with permission to create Images or ImageStreamMappings via the
- API are not affected by this policy - typically only administrators
- or system integrations will have those permissions.
+ description: |-
+ allowedRegistriesForImport limits the container image registries that normal users may import
+ images from. Set this list to the registries that you trust to contain valid Docker
+ images and that you want applications to be able to import from. Users with
+ permission to create Images or ImageStreamMappings via the API are not affected by
+ this policy - typically only administrators or system integrations will have those
+ permissions.
items:
- description: RegistryLocation contains a location of the registry
- specified by the registry domain name. The domain name might include
- wildcards, like '*' or '??'.
+ description: |-
+ RegistryLocation contains a location of the registry specified by the registry domain
+ name. The domain name might include wildcards, like '*' or '??'.
properties:
domainName:
- description: domainName specifies a domain name for the registry
- In case the registry use non-standard (80 or 443) port, the
- port should be included in the domain name as well.
+ description: |-
+ domainName specifies a domain name for the registry
+ In case the registry use non-standard (80 or 443) port, the port should be included
+ in the domain name as well.
type: string
insecure:
- description: insecure indicates whether the registry is secure
- (https) or insecure (http) By default (if not specified) the
- registry is assumed as secure.
+ description: |-
+ insecure indicates whether the registry is secure (https) or insecure (http)
+ By default (if not specified) the registry is assumed as secure.
type: boolean
type: object
type: array
x-kubernetes-list-type: atomic
externalRegistryHostnames:
- description: externalRegistryHostnames provides the hostnames for
- the default external image registry. The external hostname should
- be set only when the image registry is exposed externally. The first
- value is used in 'publicDockerImageRepository' field in ImageStreams.
- The value must be in "hostname[:port]" format.
+ description: |-
+ externalRegistryHostnames provides the hostnames for the default external image
+ registry. The external hostname should be set only when the image registry
+ is exposed externally. The first value is used in 'publicDockerImageRepository'
+ field in ImageStreams. The value must be in "hostname[:port]" format.
items:
type: string
type: array
x-kubernetes-list-type: atomic
imageStreamImportMode:
- description: 'imageStreamImportMode controls the import mode behaviour
- of imagestreams. It can be set to `Legacy` or `PreserveOriginal`
- or the empty string. If this value is specified, this setting is
- applied to all newly created imagestreams which do not have the
- value set. `Legacy` indicates that the legacy behaviour should be
- used. For manifest lists, the legacy behaviour will discard the
- manifest list and import a single sub-manifest. In this case, the
- platform is chosen in the following order of priority: 1. tag annotations;
- 2. control plane arch/os; 3. linux/amd64; 4. the first manifest
- in the list. `PreserveOriginal` indicates that the original manifest
- will be preserved. For manifest lists, the manifest list and all
- its sub-manifests will be imported. When empty, the behaviour will
- be decided based on the payload type advertised by the ClusterVersion
- status, i.e single arch payload implies the import mode is Legacy
- and multi payload implies PreserveOriginal.'
+ description: |-
+ imageStreamImportMode controls the import mode behaviour of imagestreams.
+ It can be set to `Legacy` or `PreserveOriginal` or the empty string. If this value
+ is specified, this setting is applied to all newly created imagestreams which do not have the
+ value set. `Legacy` indicates that the legacy behaviour should be used.
+ For manifest lists, the legacy behaviour will discard the manifest list and import a single
+ sub-manifest. In this case, the platform is chosen in the following order of priority:
+ 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list.
+ `PreserveOriginal` indicates that the original manifest will be preserved. For manifest lists,
+ the manifest list and all its sub-manifests will be imported. When empty, the behaviour will be
+ decided based on the payload type advertised by the ClusterVersion status, i.e single arch payload
+ implies the import mode is Legacy and multi payload implies PreserveOriginal.
enum:
- ""
- Legacy
- PreserveOriginal
type: string
registrySources:
- description: registrySources contains configuration that determines
- how the container runtime should treat individual registries when
- accessing images for builds+pods. (e.g. whether or not to allow
- insecure access). It does not contain configuration for the internal
- cluster registry.
+ description: |-
+ registrySources contains configuration that determines how the container runtime
+ should treat individual registries when accessing images for builds+pods. (e.g.
+ whether or not to allow insecure access). It does not contain configuration for the
+ internal cluster registry.
properties:
allowedRegistries:
- description: "allowedRegistries are the only registries permitted
- for image pull and push actions. All other registries are denied.
- \n Only one of BlockedRegistries or AllowedRegistries may be
- set."
+ description: |-
+ allowedRegistries are the only registries permitted for image pull and push actions. All other registries are denied.
+
+ Only one of BlockedRegistries or AllowedRegistries may be set.
items:
type: string
type: array
x-kubernetes-list-type: atomic
blockedRegistries:
- description: "blockedRegistries cannot be used for image pull
- and push actions. All other registries are permitted. \n Only
- one of BlockedRegistries or AllowedRegistries may be set."
+ description: |-
+ blockedRegistries cannot be used for image pull and push actions. All other registries are permitted.
+
+ Only one of BlockedRegistries or AllowedRegistries may be set.
items:
type: string
type: array
x-kubernetes-list-type: atomic
containerRuntimeSearchRegistries:
- description: 'containerRuntimeSearchRegistries are registries
- that will be searched when pulling images that do not have fully
- qualified domains in their pull specs. Registries will be searched
- in the order provided in the list. Note: this search list only
- works with the container runtime, i.e CRI-O. Will NOT work with
- builds or imagestream imports.'
+ description: |-
+ containerRuntimeSearchRegistries are registries that will be searched when pulling images that do not have fully qualified
+ domains in their pull specs. Registries will be searched in the order provided in the list.
+ Note: this search list only works with the container runtime, i.e CRI-O. Will NOT work with builds or imagestream imports.
format: hostname
items:
type: string
@@ -166,40 +170,38 @@ spec:
be overridden.
properties:
externalRegistryHostnames:
- description: externalRegistryHostnames provides the hostnames for
- the default external image registry. The external hostname should
- be set only when the image registry is exposed externally. The first
- value is used in 'publicDockerImageRepository' field in ImageStreams.
- The value must be in "hostname[:port]" format.
+ description: |-
+ externalRegistryHostnames provides the hostnames for the default external image
+ registry. The external hostname should be set only when the image registry
+ is exposed externally. The first value is used in 'publicDockerImageRepository'
+ field in ImageStreams. The value must be in "hostname[:port]" format.
items:
type: string
type: array
x-kubernetes-list-type: atomic
imageStreamImportMode:
- description: 'imageStreamImportMode controls the import mode behaviour
- of imagestreams. It can be `Legacy` or `PreserveOriginal`. `Legacy`
- indicates that the legacy behaviour should be used. For manifest
- lists, the legacy behaviour will discard the manifest list and import
- a single sub-manifest. In this case, the platform is chosen in the
- following order of priority: 1. tag annotations; 2. control plane
- arch/os; 3. linux/amd64; 4. the first manifest in the list. `PreserveOriginal`
- indicates that the original manifest will be preserved. For manifest
- lists, the manifest list and all its sub-manifests will be imported.
- This value will be reconciled based on either the spec value or
- if no spec value is specified, the image registry operator would
- look at the ClusterVersion status to determine the payload type
- and set the import mode accordingly, i.e single arch payload implies
- the import mode is Legacy and multi payload implies PreserveOriginal.'
+ description: |-
+ imageStreamImportMode controls the import mode behaviour of imagestreams. It can be
+ `Legacy` or `PreserveOriginal`. `Legacy` indicates that the legacy behaviour should be used.
+ For manifest lists, the legacy behaviour will discard the manifest list and import a single
+ sub-manifest. In this case, the platform is chosen in the following order of priority:
+ 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list.
+ `PreserveOriginal` indicates that the original manifest will be preserved. For manifest lists,
+ the manifest list and all its sub-manifests will be imported. This value will be reconciled based
+ on either the spec value or if no spec value is specified, the image registry operator would look
+ at the ClusterVersion status to determine the payload type and set the import mode accordingly,
+ i.e single arch payload implies the import mode is Legacy and multi payload implies PreserveOriginal.
enum:
- ""
- Legacy
- PreserveOriginal
type: string
internalRegistryHostname:
- description: internalRegistryHostname sets the hostname for the default
- internal image registry. The value must be in "hostname[:port]"
- format. This value is set by the image registry operator which controls
- the internal registry hostname.
+ description: |-
+ internalRegistryHostname sets the hostname for the default internal image
+ registry. The value must be in "hostname[:port]" format.
+ This value is set by the image registry operator which controls the internal registry
+ hostname.
type: string
type: object
required:
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_images-TechPreviewNoUpgrade.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_images-TechPreviewNoUpgrade.crd.yaml
index a733a86f0f5a62cfe71178f3070e847b5ab27f82..66bebe4aa7afa956b85c109bfa4c2cbd6aa339b0 100644
--- a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_images-TechPreviewNoUpgrade.crd.yaml
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_images-TechPreviewNoUpgrade.crd.yaml
@@ -21,24 +21,30 @@ spec:
- name: v1
schema:
openAPIV3Schema:
- description: "Image governs policies related to imagestream imports and runtime
- configuration for external registries. It allows cluster admins to configure
- which registries OpenShift is allowed to import images from, extra CA trust
- bundles for external registries, and policies to block or allow registry
- hostnames. When exposing OpenShift's image registry to the public, this
- also lets cluster admins specify the external hostname. \n Compatibility
- level 1: Stable within a major release for a minimum of 12 months or 3 minor
- releases (whichever is longer)."
+ description: |-
+ Image governs policies related to imagestream imports and runtime configuration
+ for external registries. It allows cluster admins to configure which registries
+ OpenShift is allowed to import images from, extra CA trust bundles for external
+ registries, and policies to block or allow registry hostnames.
+ When exposing OpenShift's image registry to the public, this also lets cluster
+ admins specify the external hostname.
+
+ Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -46,9 +52,10 @@ spec:
description: spec holds user settable values for configuration
properties:
additionalTrustedCA:
- description: additionalTrustedCA is a reference to a ConfigMap containing
- additional CAs that should be trusted during imagestream import,
- pod image pull, build image pull, and imageregistry pullthrough.
+ description: |-
+ additionalTrustedCA is a reference to a ConfigMap containing additional CAs that
+ should be trusted during imagestream import, pod image pull, build image pull, and
+ imageregistry pullthrough.
The namespace for this config map is openshift-config.
properties:
name:
@@ -59,93 +66,90 @@ spec:
- name
type: object
allowedRegistriesForImport:
- description: allowedRegistriesForImport limits the container image
- registries that normal users may import images from. Set this list
- to the registries that you trust to contain valid Docker images
- and that you want applications to be able to import from. Users
- with permission to create Images or ImageStreamMappings via the
- API are not affected by this policy - typically only administrators
- or system integrations will have those permissions.
+ description: |-
+ allowedRegistriesForImport limits the container image registries that normal users may import
+ images from. Set this list to the registries that you trust to contain valid Docker
+ images and that you want applications to be able to import from. Users with
+ permission to create Images or ImageStreamMappings via the API are not affected by
+ this policy - typically only administrators or system integrations will have those
+ permissions.
items:
- description: RegistryLocation contains a location of the registry
- specified by the registry domain name. The domain name might include
- wildcards, like '*' or '??'.
+ description: |-
+ RegistryLocation contains a location of the registry specified by the registry domain
+ name. The domain name might include wildcards, like '*' or '??'.
properties:
domainName:
- description: domainName specifies a domain name for the registry
- In case the registry use non-standard (80 or 443) port, the
- port should be included in the domain name as well.
+ description: |-
+ domainName specifies a domain name for the registry
+ In case the registry use non-standard (80 or 443) port, the port should be included
+ in the domain name as well.
type: string
insecure:
- description: insecure indicates whether the registry is secure
- (https) or insecure (http) By default (if not specified) the
- registry is assumed as secure.
+ description: |-
+ insecure indicates whether the registry is secure (https) or insecure (http)
+ By default (if not specified) the registry is assumed as secure.
type: boolean
type: object
type: array
x-kubernetes-list-type: atomic
externalRegistryHostnames:
- description: externalRegistryHostnames provides the hostnames for
- the default external image registry. The external hostname should
- be set only when the image registry is exposed externally. The first
- value is used in 'publicDockerImageRepository' field in ImageStreams.
- The value must be in "hostname[:port]" format.
+ description: |-
+ externalRegistryHostnames provides the hostnames for the default external image
+ registry. The external hostname should be set only when the image registry
+ is exposed externally. The first value is used in 'publicDockerImageRepository'
+ field in ImageStreams. The value must be in "hostname[:port]" format.
items:
type: string
type: array
x-kubernetes-list-type: atomic
imageStreamImportMode:
- description: 'imageStreamImportMode controls the import mode behaviour
- of imagestreams. It can be set to `Legacy` or `PreserveOriginal`
- or the empty string. If this value is specified, this setting is
- applied to all newly created imagestreams which do not have the
- value set. `Legacy` indicates that the legacy behaviour should be
- used. For manifest lists, the legacy behaviour will discard the
- manifest list and import a single sub-manifest. In this case, the
- platform is chosen in the following order of priority: 1. tag annotations;
- 2. control plane arch/os; 3. linux/amd64; 4. the first manifest
- in the list. `PreserveOriginal` indicates that the original manifest
- will be preserved. For manifest lists, the manifest list and all
- its sub-manifests will be imported. When empty, the behaviour will
- be decided based on the payload type advertised by the ClusterVersion
- status, i.e single arch payload implies the import mode is Legacy
- and multi payload implies PreserveOriginal.'
+ description: |-
+ imageStreamImportMode controls the import mode behaviour of imagestreams.
+ It can be set to `Legacy` or `PreserveOriginal` or the empty string. If this value
+ is specified, this setting is applied to all newly created imagestreams which do not have the
+ value set. `Legacy` indicates that the legacy behaviour should be used.
+ For manifest lists, the legacy behaviour will discard the manifest list and import a single
+ sub-manifest. In this case, the platform is chosen in the following order of priority:
+ 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list.
+ `PreserveOriginal` indicates that the original manifest will be preserved. For manifest lists,
+ the manifest list and all its sub-manifests will be imported. When empty, the behaviour will be
+ decided based on the payload type advertised by the ClusterVersion status, i.e single arch payload
+ implies the import mode is Legacy and multi payload implies PreserveOriginal.
enum:
- ""
- Legacy
- PreserveOriginal
type: string
registrySources:
- description: registrySources contains configuration that determines
- how the container runtime should treat individual registries when
- accessing images for builds+pods. (e.g. whether or not to allow
- insecure access). It does not contain configuration for the internal
- cluster registry.
+ description: |-
+ registrySources contains configuration that determines how the container runtime
+ should treat individual registries when accessing images for builds+pods. (e.g.
+ whether or not to allow insecure access). It does not contain configuration for the
+ internal cluster registry.
properties:
allowedRegistries:
- description: "allowedRegistries are the only registries permitted
- for image pull and push actions. All other registries are denied.
- \n Only one of BlockedRegistries or AllowedRegistries may be
- set."
+ description: |-
+ allowedRegistries are the only registries permitted for image pull and push actions. All other registries are denied.
+
+ Only one of BlockedRegistries or AllowedRegistries may be set.
items:
type: string
type: array
x-kubernetes-list-type: atomic
blockedRegistries:
- description: "blockedRegistries cannot be used for image pull
- and push actions. All other registries are permitted. \n Only
- one of BlockedRegistries or AllowedRegistries may be set."
+ description: |-
+ blockedRegistries cannot be used for image pull and push actions. All other registries are permitted.
+
+ Only one of BlockedRegistries or AllowedRegistries may be set.
items:
type: string
type: array
x-kubernetes-list-type: atomic
containerRuntimeSearchRegistries:
- description: 'containerRuntimeSearchRegistries are registries
- that will be searched when pulling images that do not have fully
- qualified domains in their pull specs. Registries will be searched
- in the order provided in the list. Note: this search list only
- works with the container runtime, i.e CRI-O. Will NOT work with
- builds or imagestream imports.'
+ description: |-
+ containerRuntimeSearchRegistries are registries that will be searched when pulling images that do not have fully qualified
+ domains in their pull specs. Registries will be searched in the order provided in the list.
+ Note: this search list only works with the container runtime, i.e CRI-O. Will NOT work with builds or imagestream imports.
format: hostname
items:
type: string
@@ -166,40 +170,38 @@ spec:
be overridden.
properties:
externalRegistryHostnames:
- description: externalRegistryHostnames provides the hostnames for
- the default external image registry. The external hostname should
- be set only when the image registry is exposed externally. The first
- value is used in 'publicDockerImageRepository' field in ImageStreams.
- The value must be in "hostname[:port]" format.
+ description: |-
+ externalRegistryHostnames provides the hostnames for the default external image
+ registry. The external hostname should be set only when the image registry
+ is exposed externally. The first value is used in 'publicDockerImageRepository'
+ field in ImageStreams. The value must be in "hostname[:port]" format.
items:
type: string
type: array
x-kubernetes-list-type: atomic
imageStreamImportMode:
- description: 'imageStreamImportMode controls the import mode behaviour
- of imagestreams. It can be `Legacy` or `PreserveOriginal`. `Legacy`
- indicates that the legacy behaviour should be used. For manifest
- lists, the legacy behaviour will discard the manifest list and import
- a single sub-manifest. In this case, the platform is chosen in the
- following order of priority: 1. tag annotations; 2. control plane
- arch/os; 3. linux/amd64; 4. the first manifest in the list. `PreserveOriginal`
- indicates that the original manifest will be preserved. For manifest
- lists, the manifest list and all its sub-manifests will be imported.
- This value will be reconciled based on either the spec value or
- if no spec value is specified, the image registry operator would
- look at the ClusterVersion status to determine the payload type
- and set the import mode accordingly, i.e single arch payload implies
- the import mode is Legacy and multi payload implies PreserveOriginal.'
+ description: |-
+ imageStreamImportMode controls the import mode behaviour of imagestreams. It can be
+ `Legacy` or `PreserveOriginal`. `Legacy` indicates that the legacy behaviour should be used.
+ For manifest lists, the legacy behaviour will discard the manifest list and import a single
+ sub-manifest. In this case, the platform is chosen in the following order of priority:
+ 1. tag annotations; 2. control plane arch/os; 3. linux/amd64; 4. the first manifest in the list.
+ `PreserveOriginal` indicates that the original manifest will be preserved. For manifest lists,
+ the manifest list and all its sub-manifests will be imported. This value will be reconciled based
+ on either the spec value or if no spec value is specified, the image registry operator would look
+ at the ClusterVersion status to determine the payload type and set the import mode accordingly,
+ i.e single arch payload implies the import mode is Legacy and multi payload implies PreserveOriginal.
enum:
- ""
- Legacy
- PreserveOriginal
type: string
internalRegistryHostname:
- description: internalRegistryHostname sets the hostname for the default
- internal image registry. The value must be in "hostname[:port]"
- format. This value is set by the image registry operator which controls
- the internal registry hostname.
+ description: |-
+ internalRegistryHostname sets the hostname for the default internal image
+ registry. The value must be in "hostname[:port]" format.
+ This value is set by the image registry operator which controls the internal registry
+ hostname.
type: string
type: object
required:
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_imagetagmirrorsets.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_imagetagmirrorsets.crd.yaml
index 6115cc0ee62c20b90844a1b8c1cb516eb8bfc1cb..5593c3d953475c17e42b3348e68858ba79841f1a 100644
--- a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_imagetagmirrorsets.crd.yaml
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_imagetagmirrorsets.crd.yaml
@@ -22,21 +22,26 @@ spec:
- name: v1
schema:
openAPIV3Schema:
- description: "ImageTagMirrorSet holds cluster-wide information about how to
- handle registry mirror rules on using tag pull specification. When multiple
- policies are defined, the outcome of the behavior is defined on each field.
- \n Compatibility level 1: Stable within a major release for a minimum of
- 12 months or 3 minor releases (whichever is longer)."
+ description: |-
+ ImageTagMirrorSet holds cluster-wide information about how to handle registry mirror rules on using tag pull specification.
+ When multiple policies are defined, the outcome of the behavior is defined on each field.
+
+ Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -44,87 +49,84 @@ spec:
description: spec holds user settable values for configuration
properties:
imageTagMirrors:
- description: "imageTagMirrors allows images referenced by image tags
- in pods to be pulled from alternative mirrored repository locations.
- The image pull specification provided to the pod will be compared
- to the source locations described in imageTagMirrors and the image
- may be pulled down from any of the mirrors in the list instead of
- the specified repository allowing administrators to choose a potentially
- faster mirror. To use mirrors to pull images using digest specification
- only, users should configure a list of mirrors using \"ImageDigestMirrorSet\"
- CRD. \n If the image pull specification matches the repository of
- \"source\" in multiple imagetagmirrorset objects, only the objects
- which define the most specific namespace match will be used. For
- example, if there are objects using quay.io/libpod and quay.io/libpod/busybox
- as the \"source\", only the objects using quay.io/libpod/busybox
- are going to apply for pull specification quay.io/libpod/busybox.
- Each “source†repository is treated independently; configurations
- for different “source†repositories don’t interact. \n If the \"mirrors\"
- is not specified, the image will continue to be pulled from the
- specified repository in the pull spec. \n When multiple policies
- are defined for the same “source†repository, the sets of defined
- mirrors will be merged together, preserving the relative order of
- the mirrors, if possible. For example, if policy A has mirrors `a,
- b, c` and policy B has mirrors `c, d, e`, the mirrors will be used
- in the order `a, b, c, d, e`. If the orders of mirror entries conflict
- (e.g. `a, b` vs. `b, a`) the configuration is not rejected but the
- resulting order is unspecified. Users who want to use a deterministic
- order of mirrors, should configure them into one list of mirrors
- using the expected order."
+ description: |-
+ imageTagMirrors allows images referenced by image tags in pods to be
+ pulled from alternative mirrored repository locations. The image pull specification
+ provided to the pod will be compared to the source locations described in imageTagMirrors
+ and the image may be pulled down from any of the mirrors in the list instead of the
+ specified repository allowing administrators to choose a potentially faster mirror.
+ To use mirrors to pull images using digest specification only, users should configure
+ a list of mirrors using "ImageDigestMirrorSet" CRD.
+
+ If the image pull specification matches the repository of "source" in multiple imagetagmirrorset objects,
+ only the objects which define the most specific namespace match will be used.
+ For example, if there are objects using quay.io/libpod and quay.io/libpod/busybox as
+ the "source", only the objects using quay.io/libpod/busybox are going to apply
+ for pull specification quay.io/libpod/busybox.
+ Each “source†repository is treated independently; configurations for different “sourceâ€
+ repositories don’t interact.
+
+ If the "mirrors" is not specified, the image will continue to be pulled from the specified
+ repository in the pull spec.
+
+ When multiple policies are defined for the same “source†repository, the sets of defined
+ mirrors will be merged together, preserving the relative order of the mirrors, if possible.
+ For example, if policy A has mirrors `a, b, c` and policy B has mirrors `c, d, e`, the
+ mirrors will be used in the order `a, b, c, d, e`. If the orders of mirror entries conflict
+ (e.g. `a, b` vs. `b, a`) the configuration is not rejected but the resulting order is unspecified.
+ Users who want to use a deterministic order of mirrors, should configure them into one list of mirrors using the expected order.
items:
description: ImageTagMirrors holds cluster-wide information about
how to handle mirrors in the registries config.
properties:
mirrorSourcePolicy:
- description: mirrorSourcePolicy defines the fallback policy
- if fails to pull image from the mirrors. If unset, the image
- will continue to be pulled from the repository in the pull
- spec. sourcePolicy is valid configuration only when one or
- more mirrors are in the mirror list.
+ description: |-
+ mirrorSourcePolicy defines the fallback policy if fails to pull image from the mirrors.
+ If unset, the image will continue to be pulled from the repository in the pull spec.
+ sourcePolicy is valid configuration only when one or more mirrors are in the mirror list.
enum:
- NeverContactSource
- AllowContactingSource
type: string
mirrors:
- description: 'mirrors is zero or more locations that may also
- contain the same images. No mirror will be configured if not
- specified. Images can be pulled from these mirrors only if
- they are referenced by their tags. The mirrored location is
- obtained by replacing the part of the input reference that
- matches source by the mirrors entry, e.g. for registry.redhat.io/product/repo
- reference, a (source, mirror) pair *.redhat.io, mirror.local/redhat
- causes a mirror.local/redhat/product/repo repository to be
- used. Pulling images by tag can potentially yield different
- images, depending on which endpoint we pull from. Configuring
- a list of mirrors using "ImageDigestMirrorSet" CRD and forcing
- digest-pulls for mirrors avoids that issue. The order of mirrors
- in this list is treated as the user''s desired priority, while
- source is by default considered lower priority than all mirrors.
- If no mirror is specified or all image pulls from the mirror
- list fail, the image will continue to be pulled from the repository
- in the pull spec unless explicitly prohibited by "mirrorSourcePolicy".
- Other cluster configuration, including (but not limited to)
- other imageTagMirrors objects, may impact the exact order
- mirrors are contacted in, or some mirrors may be contacted
- in parallel, so this should be considered a preference rather
- than a guarantee of ordering. "mirrors" uses one of the following
- formats: host[:port] host[:port]/namespace[/namespace…] host[:port]/namespace[/namespace…]/repo
- for more information about the format, see the document about
- the location field: https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md#choosing-a-registry-toml-table'
+ description: |-
+ mirrors is zero or more locations that may also contain the same images. No mirror will be configured if not specified.
+ Images can be pulled from these mirrors only if they are referenced by their tags.
+ The mirrored location is obtained by replacing the part of the input reference that
+ matches source by the mirrors entry, e.g. for registry.redhat.io/product/repo reference,
+ a (source, mirror) pair *.redhat.io, mirror.local/redhat causes a mirror.local/redhat/product/repo
+ repository to be used.
+ Pulling images by tag can potentially yield different images, depending on which endpoint we pull from.
+ Configuring a list of mirrors using "ImageDigestMirrorSet" CRD and forcing digest-pulls for mirrors avoids that issue.
+ The order of mirrors in this list is treated as the user's desired priority, while source
+ is by default considered lower priority than all mirrors.
+ If no mirror is specified or all image pulls from the mirror list fail, the image will continue to be
+ pulled from the repository in the pull spec unless explicitly prohibited by "mirrorSourcePolicy".
+ Other cluster configuration, including (but not limited to) other imageTagMirrors objects,
+ may impact the exact order mirrors are contacted in, or some mirrors may be contacted
+ in parallel, so this should be considered a preference rather than a guarantee of ordering.
+ "mirrors" uses one of the following formats:
+ host[:port]
+ host[:port]/namespace[/namespace…]
+ host[:port]/namespace[/namespace…]/repo
+ for more information about the format, see the document about the location field:
+ https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md#choosing-a-registry-toml-table
items:
pattern: ^((?:[a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9])(?:(?:\.(?:[a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9]))+)?(?::[0-9]+)?)(?:(?:/[a-z0-9]+(?:(?:(?:[._]|__|[-]*)[a-z0-9]+)+)?)+)?$
type: string
type: array
x-kubernetes-list-type: set
source:
- description: 'source matches the repository that users refer
- to, e.g. in image pull specifications. Setting source to a
- registry hostname e.g. docker.io. quay.io, or registry.redhat.io,
- will match the image pull specification of corressponding
- registry. "source" uses one of the following formats: host[:port]
- host[:port]/namespace[/namespace…] host[:port]/namespace[/namespace…]/repo
- [*.]host for more information about the format, see the document
- about the location field: https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md#choosing-a-registry-toml-table'
+ description: |-
+ source matches the repository that users refer to, e.g. in image pull specifications. Setting source to a registry hostname
+ e.g. docker.io. quay.io, or registry.redhat.io, will match the image pull specification of corressponding registry.
+ "source" uses one of the following formats:
+ host[:port]
+ host[:port]/namespace[/namespace…]
+ host[:port]/namespace[/namespace…]/repo
+ [*.]host
+ for more information about the format, see the document about the location field:
+ https://github.com/containers/image/blob/main/docs/containers-registries.conf.5.md#choosing-a-registry-toml-table
pattern: ^\*(?:\.(?:[a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9]))+$|^((?:[a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9])(?:(?:\.(?:[a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9]))+)?(?::[0-9]+)?)(?:(?:/[a-z0-9]+(?:(?:(?:[._]|__|[-]*)[a-z0-9]+)+)?)+)?$
type: string
required:
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_infrastructures-CustomNoUpgrade.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_infrastructures-CustomNoUpgrade.crd.yaml
index c275154261c18cb1fddb75af7bca94d539388e4a..4062d33bf23a23909f3c41d1dad548238f5998f8 100644
--- a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_infrastructures-CustomNoUpgrade.crd.yaml
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_infrastructures-CustomNoUpgrade.crd.yaml
@@ -21,20 +21,25 @@ spec:
- name: v1
schema:
openAPIV3Schema:
- description: "Infrastructure holds cluster-wide information about Infrastructure.
- \ The canonical name is `cluster` \n Compatibility level 1: Stable within
- a major release for a minimum of 12 months or 3 minor releases (whichever
- is longer)."
+ description: |-
+ Infrastructure holds cluster-wide information about Infrastructure. The canonical name is `cluster`
+
+ Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -42,19 +47,19 @@ spec:
description: spec holds user settable values for configuration
properties:
cloudConfig:
- description: "cloudConfig is a reference to a ConfigMap containing
- the cloud provider configuration file. This configuration file is
- used to configure the Kubernetes cloud provider integration when
- using the built-in cloud provider integration or the external cloud
- controller manager. The namespace for this config map is openshift-config.
- \n cloudConfig should only be consumed by the kube_cloud_config
- controller. The controller is responsible for using the user configuration
- in the spec for various platforms and combining that with the user
- provided ConfigMap in this field to create a stitched kube cloud
- config. The controller generates a ConfigMap `kube-cloud-config`
- in `openshift-config-managed` namespace with the kube cloud config
- is stored in `cloud.conf` key. All the clients are expected to use
- the generated ConfigMap only."
+ description: |-
+ cloudConfig is a reference to a ConfigMap containing the cloud provider configuration file.
+ This configuration file is used to configure the Kubernetes cloud provider integration
+ when using the built-in cloud provider integration or the external cloud controller manager.
+ The namespace for this config map is openshift-config.
+
+ cloudConfig should only be consumed by the kube_cloud_config controller.
+ The controller is responsible for using the user configuration in the spec
+ for various platforms and combining that with the user provided ConfigMap in this field
+ to create a stitched kube cloud config.
+ The controller generates a ConfigMap `kube-cloud-config` in `openshift-config-managed` namespace
+ with the kube cloud config is stored in `cloud.conf` key.
+ All the clients are expected to use the generated ConfigMap only.
properties:
key:
description: Key allows pointing to a specific key/value inside
@@ -64,8 +69,9 @@ spec:
type: string
type: object
platformSpec:
- description: platformSpec holds desired information specific to the
- underlying infrastructure provider.
+ description: |-
+ platformSpec holds desired information specific to the underlying
+ infrastructure provider.
properties:
alibabaCloud:
description: AlibabaCloud contains settings specific to the Alibaba
@@ -76,24 +82,27 @@ spec:
Services infrastructure provider.
properties:
serviceEndpoints:
- description: serviceEndpoints list contains custom endpoints
- which will override default service endpoint of AWS Services.
+ description: |-
+ serviceEndpoints list contains custom endpoints which will override default
+ service endpoint of AWS Services.
There must be only one ServiceEndpoint for a service.
items:
- description: AWSServiceEndpoint store the configuration
- of a custom url to override existing defaults of AWS Services.
+ description: |-
+ AWSServiceEndpoint store the configuration of a custom url to
+ override existing defaults of AWS Services.
properties:
name:
- description: name is the name of the AWS service. The
- list of all the service names can be found at https://docs.aws.amazon.com/general/latest/gr/aws-service-information.html
+ description: |-
+ name is the name of the AWS service.
+ The list of all the service names can be found at https://docs.aws.amazon.com/general/latest/gr/aws-service-information.html
This must be provided and cannot be empty.
pattern: ^[a-z0-9-]+$
type: string
url:
- description: url is fully qualified URI with scheme
- https, that overrides the default generated endpoint
- for a client. This must be provided and cannot be
- empty.
+ description: |-
+ url is fully qualified URI with scheme https, that overrides the default generated
+ endpoint for a client.
+ This must be provided and cannot be empty.
pattern: ^https://
type: string
type: object
@@ -109,17 +118,16 @@ spec:
platform.
properties:
apiServerInternalIPs:
- description: apiServerInternalIPs are the IP addresses to
- contact the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. These are the IPs for
- a self-hosted load balancer in front of the API servers.
- In dual stack clusters this list contains two IP addresses,
- one from IPv4 family and one from IPv6. In single stack
- clusters a single IP address is expected. When omitted,
- values from the status.apiServerInternalIPs will be used.
- Once set, the list cannot be completely removed (but its
- second entry can).
+ description: |-
+ apiServerInternalIPs are the IP addresses to contact the Kubernetes API
+ server that can be used by components inside the cluster, like kubelets
+ using the infrastructure rather than Kubernetes networking. These are the
+ IPs for a self-hosted load balancer in front of the API servers.
+ In dual stack clusters this list contains two IP addresses, one from IPv4
+ family and one from IPv6.
+ In single stack clusters a single IP address is expected.
+ When omitted, values from the status.apiServerInternalIPs will be used.
+ Once set, the list cannot be completely removed (but its second entry can).
items:
description: IP is an IP address (for example, "10.0.0.0"
or "fd00::").
@@ -138,15 +146,15 @@ spec:
rule: 'size(self) == 2 && isIP(self[0]) && isIP(self[1])
? ip(self[0]).family() != ip(self[1]).family() : true'
ingressIPs:
- description: ingressIPs are the external IPs which route to
- the default ingress controller. The IPs are suitable targets
- of a wildcard DNS record used to resolve default route host
- names. In dual stack clusters this list contains two IP
- addresses, one from IPv4 family and one from IPv6. In single
- stack clusters a single IP address is expected. When omitted,
- values from the status.ingressIPs will be used. Once set,
- the list cannot be completely removed (but its second entry
- can).
+ description: |-
+ ingressIPs are the external IPs which route to the default ingress
+ controller. The IPs are suitable targets of a wildcard DNS record used to
+ resolve default route host names.
+ In dual stack clusters this list contains two IP addresses, one from IPv4
+ family and one from IPv6.
+ In single stack clusters a single IP address is expected.
+ When omitted, values from the status.ingressIPs will be used.
+ Once set, the list cannot be completely removed (but its second entry can).
items:
description: IP is an IP address (for example, "10.0.0.0"
or "fd00::").
@@ -165,10 +173,10 @@ spec:
rule: 'size(self) == 2 && isIP(self[0]) && isIP(self[1])
? ip(self[0]).family() != ip(self[1]).family() : true'
machineNetworks:
- description: machineNetworks are IP networks used to connect
- all the OpenShift cluster nodes. Each network is provided
- in the CIDR format and should be IPv4 or IPv6, for example
- "10.0.0.0/8" or "fd00::/8".
+ description: |-
+ machineNetworks are IP networks used to connect all the OpenShift cluster
+ nodes. Each network is provided in the CIDR format and should be IPv4 or IPv6,
+ for example "10.0.0.0/8" or "fd00::/8".
items:
description: CIDR is an IP address range in CIDR notation
(for example, "10.0.0.0/8" or "fd00::/8").
@@ -194,17 +202,15 @@ spec:
Metal infrastructure provider.
type: object
external:
- description: ExternalPlatformType represents generic infrastructure
- provider. Platform-specific components should be supplemented
- separately.
+ description: |-
+ ExternalPlatformType represents generic infrastructure provider.
+ Platform-specific components should be supplemented separately.
properties:
platformName:
default: Unknown
- description: PlatformName holds the arbitrary string representing
- the infrastructure provider name, expected to be set at
- the installation time. This field is solely for informational
- and reporting purposes and is not expected to be used for
- decision-making.
+ description: |-
+ PlatformName holds the arbitrary string representing the infrastructure provider name, expected to be set at the installation time.
+ This field is solely for informational and reporting purposes and is not expected to be used for decision-making.
type: string
x-kubernetes-validations:
- message: platform name cannot be changed once set
@@ -227,20 +233,19 @@ spec:
infrastructure provider.
properties:
failureDomains:
- description: failureDomains configures failure domains information
- for the Nutanix platform. When set, the failure domains
- defined here may be used to spread Machines across prism
- element clusters to improve fault tolerance of the cluster.
+ description: |-
+ failureDomains configures failure domains information for the Nutanix platform.
+ When set, the failure domains defined here may be used to spread Machines across
+ prism element clusters to improve fault tolerance of the cluster.
items:
description: NutanixFailureDomain configures failure domain
information for the Nutanix platform.
properties:
cluster:
- description: cluster is to identify the cluster (the
- Prism Element under management of the Prism Central),
- in which the Machine's VM will be created. The cluster
- identifier (uuid or name) can be obtained from the
- Prism Central console or using the prism_central API.
+ description: |-
+ cluster is to identify the cluster (the Prism Element under management of the Prism Central),
+ in which the Machine's VM will be created. The cluster identifier (uuid or name) can be obtained
+ from the Prism Central console or using the prism_central API.
properties:
name:
description: name is the resource name in the PC.
@@ -270,23 +275,22 @@ spec:
rule: 'has(self.type) && self.type == ''Name'' ? has(self.name)
: !has(self.name)'
name:
- description: name defines the unique name of a failure
- domain. Name is required and must be at most 64 characters
- in length. It must consist of only lower case alphanumeric
- characters and hyphens (-). It must start and end
- with an alphanumeric character. This value is arbitrary
- and is used to identify the failure domain within
- the platform.
+ description: |-
+ name defines the unique name of a failure domain.
+ Name is required and must be at most 64 characters in length.
+ It must consist of only lower case alphanumeric characters and hyphens (-).
+ It must start and end with an alphanumeric character.
+ This value is arbitrary and is used to identify the failure domain within the platform.
maxLength: 64
minLength: 1
pattern: '[a-z0-9]([-a-z0-9]*[a-z0-9])?'
type: string
subnets:
- description: subnets holds a list of identifiers (one
- or more) of the cluster's network subnets for the
- Machine's VM to connect to. The subnet identifiers
- (uuid or name) can be obtained from the Prism Central
- console or using the prism_central API.
+ description: |-
+ subnets holds a list of identifiers (one or more) of the cluster's network subnets
+ If the feature gate NutanixMultiSubnets is enabled, up to 32 subnets may be configured.
+ for the Machine's VM to connect to. The subnet identifiers (uuid or name) can be
+ obtained from the Prism Central console or using the prism_central API.
items:
description: NutanixResourceIdentifier holds the identity
of a Nutanix PC resource (cluster, image, subnet,
@@ -320,27 +324,28 @@ spec:
is Name, and forbidden otherwise
rule: 'has(self.type) && self.type == ''Name'' ? has(self.name)
: !has(self.name)'
- maxItems: 1
+ maxItems: 32
minItems: 1
type: array
- x-kubernetes-list-map-keys:
- - type
- x-kubernetes-list-type: map
+ x-kubernetes-list-type: atomic
+ x-kubernetes-validations:
+ - message: each subnet must be unique
+ rule: self.all(x, self.exists_one(y, x == y))
required:
- cluster
- name
- subnets
type: object
+ maxItems: 32
type: array
x-kubernetes-list-map-keys:
- name
x-kubernetes-list-type: map
prismCentral:
- description: prismCentral holds the endpoint address and port
- to access the Nutanix Prism Central. When a cluster-wide
- proxy is installed, by default, this endpoint will be accessed
- via the proxy. Should you wish for communication with this
- endpoint not to be proxied, please add the endpoint to the
+ description: |-
+ prismCentral holds the endpoint address and port to access the Nutanix Prism Central.
+ When a cluster-wide proxy is installed, by default, this endpoint will be accessed via the proxy.
+ Should you wish for communication with this endpoint not to be proxied, please add the endpoint to the
proxy spec.noProxy list.
properties:
address:
@@ -361,25 +366,22 @@ spec:
- port
type: object
prismElements:
- description: prismElements holds one or more endpoint address
- and port data to access the Nutanix Prism Elements (clusters)
- of the Nutanix Prism Central. Currently we only support
- one Prism Element (cluster) for an OpenShift cluster, where
- all the Nutanix resources (VMs, subnets, volumes, etc.)
- used in the OpenShift cluster are located. In the future,
- we may support Nutanix resources (VMs, etc.) spread over
- multiple Prism Elements (clusters) of the Prism Central.
+ description: |-
+ prismElements holds one or more endpoint address and port data to access the Nutanix
+ Prism Elements (clusters) of the Nutanix Prism Central. Currently we only support one
+ Prism Element (cluster) for an OpenShift cluster, where all the Nutanix resources (VMs, subnets, volumes, etc.)
+ used in the OpenShift cluster are located. In the future, we may support Nutanix resources (VMs, etc.)
+ spread over multiple Prism Elements (clusters) of the Prism Central.
items:
description: NutanixPrismElementEndpoint holds the name
and endpoint data for a Prism Element (cluster)
properties:
endpoint:
- description: endpoint holds the endpoint address and
- port data of the Prism Element (cluster). When a cluster-wide
- proxy is installed, by default, this endpoint will
- be accessed via the proxy. Should you wish for communication
- with this endpoint not to be proxied, please add the
- endpoint to the proxy spec.noProxy list.
+ description: |-
+ endpoint holds the endpoint address and port data of the Prism Element (cluster).
+ When a cluster-wide proxy is installed, by default, this endpoint will be accessed via the proxy.
+ Should you wish for communication with this endpoint not to be proxied, please add the endpoint to the
+ proxy spec.noProxy list.
properties:
address:
description: address is the endpoint address (DNS
@@ -399,10 +401,9 @@ spec:
- port
type: object
name:
- description: name is the name of the Prism Element (cluster).
- This value will correspond with the cluster field
- configured on other resources (eg Machines, PVCs,
- etc).
+ description: |-
+ name is the name of the Prism Element (cluster). This value will correspond with
+ the cluster field configured on other resources (eg Machines, PVCs, etc).
maxLength: 256
type: string
required:
@@ -422,17 +423,16 @@ spec:
infrastructure provider.
properties:
apiServerInternalIPs:
- description: apiServerInternalIPs are the IP addresses to
- contact the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. These are the IPs for
- a self-hosted load balancer in front of the API servers.
- In dual stack clusters this list contains two IP addresses,
- one from IPv4 family and one from IPv6. In single stack
- clusters a single IP address is expected. When omitted,
- values from the status.apiServerInternalIPs will be used.
- Once set, the list cannot be completely removed (but its
- second entry can).
+ description: |-
+ apiServerInternalIPs are the IP addresses to contact the Kubernetes API
+ server that can be used by components inside the cluster, like kubelets
+ using the infrastructure rather than Kubernetes networking. These are the
+ IPs for a self-hosted load balancer in front of the API servers.
+ In dual stack clusters this list contains two IP addresses, one from IPv4
+ family and one from IPv6.
+ In single stack clusters a single IP address is expected.
+ When omitted, values from the status.apiServerInternalIPs will be used.
+ Once set, the list cannot be completely removed (but its second entry can).
items:
description: IP is an IP address (for example, "10.0.0.0"
or "fd00::").
@@ -451,15 +451,15 @@ spec:
rule: 'size(self) == 2 && isIP(self[0]) && isIP(self[1])
? ip(self[0]).family() != ip(self[1]).family() : true'
ingressIPs:
- description: ingressIPs are the external IPs which route to
- the default ingress controller. The IPs are suitable targets
- of a wildcard DNS record used to resolve default route host
- names. In dual stack clusters this list contains two IP
- addresses, one from IPv4 family and one from IPv6. In single
- stack clusters a single IP address is expected. When omitted,
- values from the status.ingressIPs will be used. Once set,
- the list cannot be completely removed (but its second entry
- can).
+ description: |-
+ ingressIPs are the external IPs which route to the default ingress
+ controller. The IPs are suitable targets of a wildcard DNS record used to
+ resolve default route host names.
+ In dual stack clusters this list contains two IP addresses, one from IPv4
+ family and one from IPv6.
+ In single stack clusters a single IP address is expected.
+ When omitted, values from the status.ingressIPs will be used.
+ Once set, the list cannot be completely removed (but its second entry can).
items:
description: IP is an IP address (for example, "10.0.0.0"
or "fd00::").
@@ -478,10 +478,10 @@ spec:
rule: 'size(self) == 2 && isIP(self[0]) && isIP(self[1])
? ip(self[0]).family() != ip(self[1]).family() : true'
machineNetworks:
- description: machineNetworks are IP networks used to connect
- all the OpenShift cluster nodes. Each network is provided
- in the CIDR format and should be IPv4 or IPv6, for example
- "10.0.0.0/8" or "fd00::/8".
+ description: |-
+ machineNetworks are IP networks used to connect all the OpenShift cluster
+ nodes. Each network is provided in the CIDR format and should be IPv4 or IPv6,
+ for example "10.0.0.0/8" or "fd00::/8".
items:
description: CIDR is an IP address range in CIDR notation
(for example, "10.0.0.0/8" or "fd00::/8").
@@ -511,26 +511,42 @@ spec:
Systems Virtual Servers infrastructure provider.
properties:
serviceEndpoints:
- description: serviceEndpoints is a list of custom endpoints
- which will override the default service endpoints of a Power
- VS service.
+ description: |-
+ serviceEndpoints is a list of custom endpoints which will override the default
+ service endpoints of a Power VS service.
items:
- description: PowervsServiceEndpoint stores the configuration
- of a custom url to override existing defaults of PowerVS
- Services.
+ description: |-
+ PowervsServiceEndpoint stores the configuration of a custom url to
+ override existing defaults of PowerVS Services.
properties:
name:
- description: name is the name of the Power VS service.
- Few of the services are IAM - https://cloud.ibm.com/apidocs/iam-identity-token-api
+ description: |-
+ name is the name of the Power VS service.
+ Few of the services are
+ IAM - https://cloud.ibm.com/apidocs/iam-identity-token-api
ResourceController - https://cloud.ibm.com/apidocs/resource-controller/resource-controller
Power Cloud - https://cloud.ibm.com/apidocs/power-cloud
- pattern: ^[a-z0-9-]+$
+ enum:
+ - CIS
+ - COS
+ - COSConfig
+ - DNSServices
+ - GlobalCatalog
+ - GlobalSearch
+ - GlobalTagging
+ - HyperProtect
+ - IAM
+ - KeyProtect
+ - Power
+ - ResourceController
+ - ResourceManager
+ - VPC
type: string
url:
- description: url is fully qualified URI with scheme
- https, that overrides the default generated endpoint
- for a client. This must be provided and cannot be
- empty.
+ description: |-
+ url is fully qualified URI with scheme https, that overrides the default generated
+ endpoint for a client.
+ This must be provided and cannot be empty.
format: uri
pattern: ^https://
type: string
@@ -544,16 +560,15 @@ spec:
x-kubernetes-list-type: map
type: object
type:
- description: type is the underlying infrastructure provider for
- the cluster. This value controls whether infrastructure automation
- such as service load balancers, dynamic volume provisioning,
- machine creation and deletion, and other integrations are enabled.
- If None, no infrastructure automation is enabled. Allowed values
- are "AWS", "Azure", "BareMetal", "GCP", "Libvirt", "OpenStack",
- "VSphere", "oVirt", "KubeVirt", "EquinixMetal", "PowerVS", "AlibabaCloud",
- "Nutanix" and "None". Individual components may not support
- all platforms, and must handle unrecognized platforms as None
- if they do not support that platform.
+ description: |-
+ type is the underlying infrastructure provider for the cluster. This
+ value controls whether infrastructure automation such as service load
+ balancers, dynamic volume provisioning, machine creation and deletion, and
+ other integrations are enabled. If None, no infrastructure automation is
+ enabled. Allowed values are "AWS", "Azure", "BareMetal", "GCP", "Libvirt",
+ "OpenStack", "VSphere", "oVirt", "KubeVirt", "EquinixMetal", "PowerVS",
+ "AlibabaCloud", "Nutanix" and "None". Individual components may not support all platforms,
+ and must handle unrecognized platforms as None if they do not support that platform.
enum:
- ""
- AWS
@@ -578,17 +593,16 @@ spec:
infrastructure provider.
properties:
apiServerInternalIPs:
- description: apiServerInternalIPs are the IP addresses to
- contact the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. These are the IPs for
- a self-hosted load balancer in front of the API servers.
- In dual stack clusters this list contains two IP addresses,
- one from IPv4 family and one from IPv6. In single stack
- clusters a single IP address is expected. When omitted,
- values from the status.apiServerInternalIPs will be used.
- Once set, the list cannot be completely removed (but its
- second entry can).
+ description: |-
+ apiServerInternalIPs are the IP addresses to contact the Kubernetes API
+ server that can be used by components inside the cluster, like kubelets
+ using the infrastructure rather than Kubernetes networking. These are the
+ IPs for a self-hosted load balancer in front of the API servers.
+ In dual stack clusters this list contains two IP addresses, one from IPv4
+ family and one from IPv6.
+ In single stack clusters a single IP address is expected.
+ When omitted, values from the status.apiServerInternalIPs will be used.
+ Once set, the list cannot be completely removed (but its second entry can).
items:
description: IP is an IP address (for example, "10.0.0.0"
or "fd00::").
@@ -607,24 +621,26 @@ spec:
rule: 'size(self) == 2 && isIP(self[0]) && isIP(self[1])
? ip(self[0]).family() != ip(self[1]).family() : true'
failureDomains:
- description: failureDomains contains the definition of region,
- zone and the vCenter topology. If this is omitted failure
- domains (regions and zones) will not be used.
+ description: |-
+ failureDomains contains the definition of region, zone and the vCenter topology.
+ If this is omitted failure domains (regions and zones) will not be used.
items:
- description: VSpherePlatformFailureDomainSpec holds the
- region and zone failure domain and the vCenter topology
- of that failure domain.
+ description: |-
+ VSpherePlatformFailureDomainSpec holds the region and zone failure domain and
+ the vCenter topology of that failure domain.
properties:
name:
- description: name defines the arbitrary but unique name
+ description: |-
+ name defines the arbitrary but unique name
of a failure domain.
maxLength: 256
minLength: 1
type: string
region:
- description: region defines the name of a region tag
- that will be attached to a vCenter datacenter. The
- tag category in vCenter must be named openshift-region.
+ description: |-
+ region defines the name of a region tag that will
+ be attached to a vCenter datacenter. The tag
+ category in vCenter must be named openshift-region.
maxLength: 80
minLength: 1
type: string
@@ -634,7 +650,7 @@ spec:
- format: ipv6
- format: hostname
description: server is the fully-qualified domain name
- or the IP address of the vCenter server. ---
+ or the IP address of the vCenter server.
maxLength: 255
minLength: 1
type: string
@@ -643,45 +659,48 @@ spec:
using vSphere constructs
properties:
computeCluster:
- description: computeCluster the absolute path of
- the vCenter cluster in which virtual machine will
- be located. The absolute path is of the form /<datacenter>/host/<cluster>.
+ description: |-
+ computeCluster the absolute path of the vCenter cluster
+ in which virtual machine will be located.
+ The absolute path is of the form /<datacenter>/host/<cluster>.
The maximum length of the path is 2048 characters.
maxLength: 2048
pattern: ^/.*?/host/.*?
type: string
datacenter:
- description: datacenter is the name of vCenter datacenter
- in which virtual machines will be located. The
- maximum length of the datacenter name is 80 characters.
+ description: |-
+ datacenter is the name of vCenter datacenter in which virtual machines will be located.
+ The maximum length of the datacenter name is 80 characters.
maxLength: 80
type: string
datastore:
- description: datastore is the absolute path of the
- datastore in which the virtual machine is located.
+ description: |-
+ datastore is the absolute path of the datastore in which the
+ virtual machine is located.
The absolute path is of the form /<datacenter>/datastore/<datastore>
The maximum length of the path is 2048 characters.
maxLength: 2048
pattern: ^/.*?/datastore/.*?
type: string
folder:
- description: folder is the absolute path of the
- folder where virtual machines are located. The
- absolute path is of the form /<datacenter>/vm/<folder>.
+ description: |-
+ folder is the absolute path of the folder where
+ virtual machines are located. The absolute path
+ is of the form /<datacenter>/vm/<folder>.
The maximum length of the path is 2048 characters.
maxLength: 2048
pattern: ^/.*?/vm/.*?
type: string
networks:
- description: 'networks is the list of port group
- network names within this failure domain. If feature
- gate VSphereMultiNetworks is enabled, up to 10
- network adapters may be defined. 10 is the maximum
- number of virtual network devices which may be
- attached to a VM as defined by: https://configmax.esp.vmware.com/guest?vmwareproduct=vSphere&release=vSphere%208.0&categories=1-0
- The available networks (port groups) can be listed
- using `govc ls ''network/*''` Networks should
- be in the form of an absolute path: /<datacenter>/network/<portgroup>.'
+ description: |-
+ networks is the list of port group network names within this failure domain.
+ If feature gate VSphereMultiNetworks is enabled, up to 10 network adapters may be defined.
+ 10 is the maximum number of virtual network devices which may be attached to a VM as defined by:
+ https://configmax.esp.vmware.com/guest?vmwareproduct=vSphere&release=vSphere%208.0&categories=1-0
+ The available networks (port groups) can be listed using
+ `govc ls 'network/*'`
+ Networks should be in the form of an absolute path:
+ /<datacenter>/network/<portgroup>.
items:
type: string
maxItems: 10
@@ -689,25 +708,24 @@ spec:
type: array
x-kubernetes-list-type: atomic
resourcePool:
- description: resourcePool is the absolute path of
- the resource pool where virtual machines will
- be created. The absolute path is of the form /<datacenter>/host/<cluster>/Resources/<resourcepool>.
+ description: |-
+ resourcePool is the absolute path of the resource pool where virtual machines will be
+ created. The absolute path is of the form /<datacenter>/host/<cluster>/Resources/<resourcepool>.
The maximum length of the path is 2048 characters.
maxLength: 2048
pattern: ^/.*?/host/.*?/Resources.*
type: string
template:
- description: "template is the full inventory path
- of the virtual machine or template that will be
- cloned when creating new machines in this failure
- domain. The maximum length of the path is 2048
- characters. \n When omitted, the template will
- be calculated by the control plane machineset
- operator based on the region and zone defined
- in VSpherePlatformFailureDomainSpec. For example,
- for zone=zonea, region=region1, and infrastructure
- name=test, the template path would be calculated
- as /<datacenter>/vm/test-rhcos-region1-zonea."
+ description: |-
+ template is the full inventory path of the virtual machine or template
+ that will be cloned when creating new machines in this failure domain.
+ The maximum length of the path is 2048 characters.
+
+ When omitted, the template will be calculated by the control plane
+ machineset operator based on the region and zone defined in
+ VSpherePlatformFailureDomainSpec.
+ For example, for zone=zonea, region=region1, and infrastructure name=test,
+ the template path would be calculated as /<datacenter>/vm/test-rhcos-region1-zonea.
maxLength: 2048
minLength: 1
pattern: ^/.*?/vm/.*?
@@ -719,9 +737,10 @@ spec:
- networks
type: object
zone:
- description: zone defines the name of a zone tag that
- will be attached to a vCenter cluster. The tag category
- in vCenter must be named openshift-zone.
+ description: |-
+ zone defines the name of a zone tag that will
+ be attached to a vCenter cluster. The tag
+ category in vCenter must be named openshift-zone.
maxLength: 80
minLength: 1
type: string
@@ -737,15 +756,15 @@ spec:
- name
x-kubernetes-list-type: map
ingressIPs:
- description: ingressIPs are the external IPs which route to
- the default ingress controller. The IPs are suitable targets
- of a wildcard DNS record used to resolve default route host
- names. In dual stack clusters this list contains two IP
- addresses, one from IPv4 family and one from IPv6. In single
- stack clusters a single IP address is expected. When omitted,
- values from the status.ingressIPs will be used. Once set,
- the list cannot be completely removed (but its second entry
- can).
+ description: |-
+ ingressIPs are the external IPs which route to the default ingress
+ controller. The IPs are suitable targets of a wildcard DNS record used to
+ resolve default route host names.
+ In dual stack clusters this list contains two IP addresses, one from IPv4
+ family and one from IPv6.
+ In single stack clusters a single IP address is expected.
+ When omitted, values from the status.ingressIPs will be used.
+ Once set, the list cannot be completely removed (but its second entry can).
items:
description: IP is an IP address (for example, "10.0.0.0"
or "fd00::").
@@ -764,10 +783,10 @@ spec:
rule: 'size(self) == 2 && isIP(self[0]) && isIP(self[1])
? ip(self[0]).family() != ip(self[1]).family() : true'
machineNetworks:
- description: machineNetworks are IP networks used to connect
- all the OpenShift cluster nodes. Each network is provided
- in the CIDR format and should be IPv4 or IPv6, for example
- "10.0.0.0/8" or "fd00::/8".
+ description: |-
+ machineNetworks are IP networks used to connect all the OpenShift cluster
+ nodes. Each network is provided in the CIDR format and should be IPv4 or IPv6,
+ for example "10.0.0.0/8" or "fd00::/8".
items:
description: CIDR is an IP address range in CIDR notation
(for example, "10.0.0.0/8" or "fd00::/8").
@@ -783,41 +802,39 @@ spec:
x-kubernetes-validations:
- rule: self.all(x, self.exists_one(y, x == y))
nodeNetworking:
- description: nodeNetworking contains the definition of internal
- and external network constraints for assigning the node's
- networking. If this field is omitted, networking defaults
- to the legacy address selection behavior which is to only
- support a single address and return the first one found.
+ description: |-
+ nodeNetworking contains the definition of internal and external network constraints for
+ assigning the node's networking.
+ If this field is omitted, networking defaults to the legacy
+ address selection behavior which is to only support a single address and
+ return the first one found.
properties:
external:
description: external represents the network configuration
of the node that is externally routable.
properties:
excludeNetworkSubnetCidr:
- description: excludeNetworkSubnetCidr IP addresses
- in subnet ranges will be excluded when selecting
- the IP address from the VirtualMachine's VM for
- use in the status.addresses fields. ---
+ description: |-
+ excludeNetworkSubnetCidr IP addresses in subnet ranges will be excluded when selecting
+ the IP address from the VirtualMachine's VM for use in the status.addresses fields.
items:
format: cidr
type: string
type: array
x-kubernetes-list-type: atomic
network:
- description: network VirtualMachine's VM Network names
- that will be used to when searching for status.addresses
- fields. Note that if internal.networkSubnetCIDR
- and external.networkSubnetCIDR are not set, then
- the vNIC associated to this network must only have
- a single IP address assigned to it. The available
- networks (port groups) can be listed using `govc
- ls 'network/*'`
+ description: |-
+ network VirtualMachine's VM Network names that will be used to when searching
+ for status.addresses fields. Note that if internal.networkSubnetCIDR and
+ external.networkSubnetCIDR are not set, then the vNIC associated to this network must
+ only have a single IP address assigned to it.
+ The available networks (port groups) can be listed using
+ `govc ls 'network/*'`
type: string
networkSubnetCidr:
- description: networkSubnetCidr IP address on VirtualMachine's
- network interfaces included in the fields' CIDRs
- that will be used in respective status.addresses
- fields. ---
+ description: |-
+ networkSubnetCidr IP address on VirtualMachine's network interfaces included in the fields' CIDRs
+ that will be used in respective status.addresses fields.
items:
format: cidr
type: string
@@ -829,30 +846,27 @@ spec:
of the node that is routable only within the cluster.
properties:
excludeNetworkSubnetCidr:
- description: excludeNetworkSubnetCidr IP addresses
- in subnet ranges will be excluded when selecting
- the IP address from the VirtualMachine's VM for
- use in the status.addresses fields. ---
+ description: |-
+ excludeNetworkSubnetCidr IP addresses in subnet ranges will be excluded when selecting
+ the IP address from the VirtualMachine's VM for use in the status.addresses fields.
items:
format: cidr
type: string
type: array
x-kubernetes-list-type: atomic
network:
- description: network VirtualMachine's VM Network names
- that will be used to when searching for status.addresses
- fields. Note that if internal.networkSubnetCIDR
- and external.networkSubnetCIDR are not set, then
- the vNIC associated to this network must only have
- a single IP address assigned to it. The available
- networks (port groups) can be listed using `govc
- ls 'network/*'`
+ description: |-
+ network VirtualMachine's VM Network names that will be used to when searching
+ for status.addresses fields. Note that if internal.networkSubnetCIDR and
+ external.networkSubnetCIDR are not set, then the vNIC associated to this network must
+ only have a single IP address assigned to it.
+ The available networks (port groups) can be listed using
+ `govc ls 'network/*'`
type: string
networkSubnetCidr:
- description: networkSubnetCidr IP address on VirtualMachine's
- network interfaces included in the fields' CIDRs
- that will be used in respective status.addresses
- fields. ---
+ description: |-
+ networkSubnetCidr IP address on VirtualMachine's network interfaces included in the fields' CIDRs
+ that will be used in respective status.addresses fields.
items:
format: cidr
type: string
@@ -861,36 +875,38 @@ spec:
type: object
type: object
vcenters:
- description: vcenters holds the connection details for services
- to communicate with vCenter. Currently, only a single vCenter
- is supported, but in tech preview 3 vCenters are supported.
- Once the cluster has been installed, you are unable to change
- the current number of defined vCenters except in the case
- where the cluster has been upgraded from a version of OpenShift
- where the vsphere platform spec was not present. You may
- make modifications to the existing vCenters that are defined
- in the vcenters list in order to match with any added or
- modified failure domains. ---
+ description: |-
+ vcenters holds the connection details for services to communicate with vCenter.
+ Currently, only a single vCenter is supported, but in tech preview 3 vCenters are supported.
+ Once the cluster has been installed, you are unable to change the current number of defined
+ vCenters except in the case where the cluster has been upgraded from a version of OpenShift
+ where the vsphere platform spec was not present. You may make modifications to the existing
+ vCenters that are defined in the vcenters list in order to match with any added or modified
+ failure domains.
items:
- description: VSpherePlatformVCenterSpec stores the vCenter
- connection fields. This is used by the vSphere CCM.
+ description: |-
+ VSpherePlatformVCenterSpec stores the vCenter connection fields.
+ This is used by the vSphere CCM.
properties:
datacenters:
- description: The vCenter Datacenters in which the RHCOS
- vm guests are located. This field will be used by
- the Cloud Controller Manager. Each datacenter listed
- here should be used within a topology.
+ description: |-
+ The vCenter Datacenters in which the RHCOS
+ vm guests are located. This field will
+ be used by the Cloud Controller Manager.
+ Each datacenter listed here should be used within
+ a topology.
items:
type: string
minItems: 1
type: array
x-kubernetes-list-type: set
port:
- description: port is the TCP port that will be used
- to communicate to the vCenter endpoint. When omitted,
- this means the user has no opinion and it is up to
- the platform to choose a sensible default, which is
- subject to change over time.
+ description: |-
+ port is the TCP port that will be used to communicate to
+ the vCenter endpoint.
+ When omitted, this means the user has no opinion and
+ it is up to the platform to choose a sensible default,
+ which is subject to change over time.
format: int32
maximum: 32767
minimum: 1
@@ -901,7 +917,7 @@ spec:
- format: ipv6
- format: hostname
description: server is the fully-qualified domain name
- or the IP address of the vCenter server. ---
+ or the IP address of the vCenter server.
maxLength: 255
type: string
required:
@@ -936,28 +952,27 @@ spec:
be overridden.
properties:
apiServerInternalURI:
- description: apiServerInternalURL is a valid URI with scheme 'https',
- address and optionally a port (defaulting to 443). apiServerInternalURL
- can be used by components like kubelets, to contact the Kubernetes
- API server using the infrastructure provider rather than Kubernetes
- networking.
+ description: |-
+ apiServerInternalURL is a valid URI with scheme 'https',
+ address and optionally a port (defaulting to 443). apiServerInternalURL can be used by components
+ like kubelets, to contact the Kubernetes API server using the
+ infrastructure provider rather than Kubernetes networking.
type: string
apiServerURL:
- description: apiServerURL is a valid URI with scheme 'https', address
- and optionally a port (defaulting to 443). apiServerURL can be
- used by components like the web console to tell users where to find
- the Kubernetes API.
+ description: |-
+ apiServerURL is a valid URI with scheme 'https', address and
+ optionally a port (defaulting to 443). apiServerURL can be used by components like the web console
+ to tell users where to find the Kubernetes API.
type: string
controlPlaneTopology:
default: HighlyAvailable
- description: controlPlaneTopology expresses the expectations for operands
- that normally run on control nodes. The default is 'HighlyAvailable',
- which represents the behavior operators have in a "normal" cluster.
+ description: |-
+ controlPlaneTopology expresses the expectations for operands that normally run on control nodes.
+ The default is 'HighlyAvailable', which represents the behavior operators have in a "normal" cluster.
The 'SingleReplica' mode will be used in single-node deployments
- and the operators should not configure the operand for highly-available
- operation The 'External' mode indicates that the control plane is
- hosted externally to the cluster and that its components are not
- visible within the cluster.
+ and the operators should not configure the operand for highly-available operation
+ The 'External' mode indicates that the control plane is hosted externally to the cluster and that
+ its components are not visible within the cluster.
enum:
- HighlyAvailable
- SingleReplica
@@ -965,47 +980,49 @@ spec:
type: string
cpuPartitioning:
default: None
- description: cpuPartitioning expresses if CPU partitioning is a currently
- enabled feature in the cluster. CPU Partitioning means that this
- cluster can support partitioning workloads to specific CPU Sets.
- Valid values are "None" and "AllNodes". When omitted, the default
- value is "None". The default value of "None" indicates that no nodes
- will be setup with CPU partitioning. The "AllNodes" value indicates
- that all nodes have been setup with CPU partitioning, and can then
- be further configured via the PerformanceProfile API.
+ description: |-
+ cpuPartitioning expresses if CPU partitioning is a currently enabled feature in the cluster.
+ CPU Partitioning means that this cluster can support partitioning workloads to specific CPU Sets.
+ Valid values are "None" and "AllNodes". When omitted, the default value is "None".
+ The default value of "None" indicates that no nodes will be setup with CPU partitioning.
+ The "AllNodes" value indicates that all nodes have been setup with CPU partitioning,
+ and can then be further configured via the PerformanceProfile API.
enum:
- None
- AllNodes
type: string
etcdDiscoveryDomain:
- description: 'etcdDiscoveryDomain is the domain used to fetch the
- SRV records for discovering etcd servers and clients. For more info:
- https://github.com/etcd-io/etcd/blob/329be66e8b3f9e2e6af83c123ff89297e49ebd15/Documentation/op-guide/clustering.md#dns-discovery
- deprecated: as of 4.7, this field is no longer set or honored. It
- will be removed in a future release.'
+ description: |-
+ etcdDiscoveryDomain is the domain used to fetch the SRV records for discovering
+ etcd servers and clients.
+ For more info: https://github.com/etcd-io/etcd/blob/329be66e8b3f9e2e6af83c123ff89297e49ebd15/Documentation/op-guide/clustering.md#dns-discovery
+ deprecated: as of 4.7, this field is no longer set or honored. It will be removed in a future release.
type: string
infrastructureName:
- description: infrastructureName uniquely identifies a cluster with
- a human friendly name. Once set it should not be changed. Must be
- of max length 27 and must have only alphanumeric or hyphen characters.
+ description: |-
+ infrastructureName uniquely identifies a cluster with a human friendly name.
+ Once set it should not be changed. Must be of max length 27 and must have only
+ alphanumeric or hyphen characters.
type: string
infrastructureTopology:
default: HighlyAvailable
- description: 'infrastructureTopology expresses the expectations for
- infrastructure services that do not run on control plane nodes,
- usually indicated by a node selector for a `role` value other than
- `master`. The default is ''HighlyAvailable'', which represents the
- behavior operators have in a "normal" cluster. The ''SingleReplica''
- mode will be used in single-node deployments and the operators should
- not configure the operand for highly-available operation NOTE: External
- topology mode is not applicable for this field.'
+ description: |-
+ infrastructureTopology expresses the expectations for infrastructure services that do not run on control
+ plane nodes, usually indicated by a node selector for a `role` value
+ other than `master`.
+ The default is 'HighlyAvailable', which represents the behavior operators have in a "normal" cluster.
+ The 'SingleReplica' mode will be used in single-node deployments
+ and the operators should not configure the operand for highly-available operation
+ NOTE: External topology mode is not applicable for this field.
enum:
- HighlyAvailable
- SingleReplica
type: string
platform:
- description: "platform is the underlying infrastructure provider for
- the cluster. \n Deprecated: Use platformStatus.type instead."
+ description: |-
+ platform is the underlying infrastructure provider for the cluster.
+
+ Deprecated: Use platformStatus.type instead.
enum:
- ""
- AWS
@@ -1026,8 +1043,9 @@ spec:
- External
type: string
platformStatus:
- description: platformStatus holds status information specific to the
- underlying infrastructure provider.
+ description: |-
+ platformStatus holds status information specific to the underlying
+ infrastructure provider.
properties:
alibabaCloud:
description: AlibabaCloud contains settings specific to the Alibaba
@@ -1076,16 +1094,120 @@ spec:
description: AWS contains settings specific to the Amazon Web
Services infrastructure provider.
properties:
+ cloudLoadBalancerConfig:
+ default:
+ dnsType: PlatformDefault
+ description: |-
+ cloudLoadBalancerConfig holds configuration related to DNS and cloud
+ load balancers. It allows configuration of in-cluster DNS as an alternative
+ to the platform default DNS implementation.
+ When using the ClusterHosted DNS type, Load Balancer IP addresses
+ must be provided for the API and internal API load balancers as well as the
+ ingress load balancer.
+ nullable: true
+ properties:
+ clusterHosted:
+ description: |-
+ clusterHosted holds the IP addresses of API, API-Int and Ingress Load
+ Balancers on Cloud Platforms. The DNS solution hosted within the cluster
+ use these IP addresses to provide resolution for API, API-Int and Ingress
+ services.
+ properties:
+ apiIntLoadBalancerIPs:
+ description: |-
+ apiIntLoadBalancerIPs holds Load Balancer IPs for the internal API service.
+ These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses.
+ Entries in the apiIntLoadBalancerIPs must be unique.
+ A maximum of 16 IP addresses are permitted.
+ format: ip
+ items:
+ description: IP is an IP address (for example, "10.0.0.0"
+ or "fd00::").
+ maxLength: 39
+ minLength: 1
+ type: string
+ x-kubernetes-validations:
+ - message: value must be a valid IP address
+ rule: isIP(self)
+ maxItems: 16
+ type: array
+ x-kubernetes-list-type: set
+ apiLoadBalancerIPs:
+ description: |-
+ apiLoadBalancerIPs holds Load Balancer IPs for the API service.
+ These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses.
+ Could be empty for private clusters.
+ Entries in the apiLoadBalancerIPs must be unique.
+ A maximum of 16 IP addresses are permitted.
+ format: ip
+ items:
+ description: IP is an IP address (for example, "10.0.0.0"
+ or "fd00::").
+ maxLength: 39
+ minLength: 1
+ type: string
+ x-kubernetes-validations:
+ - message: value must be a valid IP address
+ rule: isIP(self)
+ maxItems: 16
+ type: array
+ x-kubernetes-list-type: set
+ ingressLoadBalancerIPs:
+ description: |-
+ ingressLoadBalancerIPs holds IPs for Ingress Load Balancers.
+ These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses.
+ Entries in the ingressLoadBalancerIPs must be unique.
+ A maximum of 16 IP addresses are permitted.
+ format: ip
+ items:
+ description: IP is an IP address (for example, "10.0.0.0"
+ or "fd00::").
+ maxLength: 39
+ minLength: 1
+ type: string
+ x-kubernetes-validations:
+ - message: value must be a valid IP address
+ rule: isIP(self)
+ maxItems: 16
+ type: array
+ x-kubernetes-list-type: set
+ type: object
+ dnsType:
+ default: PlatformDefault
+ description: |-
+ dnsType indicates the type of DNS solution in use within the cluster. Its default value of
+ `PlatformDefault` indicates that the cluster's DNS is the default provided by the cloud platform.
+ It can be set to `ClusterHosted` to bypass the configuration of the cloud default DNS. In this mode,
+ the cluster needs to provide a self-hosted DNS solution for the cluster's installation to succeed.
+ The cluster's use of the cloud's Load Balancers is unaffected by this setting.
+ The value is immutable after it has been set at install time.
+ Currently, there is no way for the customer to add additional DNS entries into the cluster hosted DNS.
+ Enabling this functionality allows the user to start their own DNS solution outside the cluster after
+ installation is complete. The customer would be responsible for configuring this custom DNS solution,
+ and it can be run in addition to the in-cluster DNS solution.
+ enum:
+ - ClusterHosted
+ - PlatformDefault
+ type: string
+ x-kubernetes-validations:
+ - message: dnsType is immutable
+ rule: oldSelf == '' || self == oldSelf
+ type: object
+ x-kubernetes-validations:
+ - message: clusterHosted is permitted only when dnsType is
+ ClusterHosted
+ rule: 'has(self.dnsType) && self.dnsType != ''ClusterHosted''
+ ? !has(self.clusterHosted) : true'
region:
description: region holds the default AWS region for new AWS
resources created by the cluster.
type: string
resourceTags:
- description: resourceTags is a list of additional tags to
- apply to AWS resources created for the cluster. See https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html
- for information on tagging AWS resources. AWS supports a
- maximum of 50 tags per resource. OpenShift reserves 25 tags
- for its use, leaving 25 tags available for the user.
+ description: |-
+ resourceTags is a list of additional tags to apply to AWS resources created for the cluster.
+ See https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html for information on tagging AWS resources.
+ AWS supports a maximum of 50 tags per resource. OpenShift reserves 25 tags for its use, leaving 25 tags
+ available for the user.
items:
description: AWSResourceTag is a tag to apply to AWS resources
created for the cluster.
@@ -1097,10 +1219,10 @@ spec:
pattern: ^[0-9A-Za-z_.:/=+-@]+$
type: string
value:
- description: value is the value of the tag. Some AWS
- service do not support empty values. Since tags are
- added to resources in many services, the length of
- the tag value must meet the requirements of all services.
+ description: |-
+ value is the value of the tag.
+ Some AWS service do not support empty values. Since tags are added to resources in many services, the
+ length of the tag value must meet the requirements of all services.
maxLength: 256
minLength: 1
pattern: ^[0-9A-Za-z_.:/=+-@]+$
@@ -1113,24 +1235,27 @@ spec:
type: array
x-kubernetes-list-type: atomic
serviceEndpoints:
- description: ServiceEndpoints list contains custom endpoints
- which will override default service endpoint of AWS Services.
+ description: |-
+ ServiceEndpoints list contains custom endpoints which will override default
+ service endpoint of AWS Services.
There must be only one ServiceEndpoint for a service.
items:
- description: AWSServiceEndpoint store the configuration
- of a custom url to override existing defaults of AWS Services.
+ description: |-
+ AWSServiceEndpoint store the configuration of a custom url to
+ override existing defaults of AWS Services.
properties:
name:
- description: name is the name of the AWS service. The
- list of all the service names can be found at https://docs.aws.amazon.com/general/latest/gr/aws-service-information.html
+ description: |-
+ name is the name of the AWS service.
+ The list of all the service names can be found at https://docs.aws.amazon.com/general/latest/gr/aws-service-information.html
This must be provided and cannot be empty.
pattern: ^[a-z0-9-]+$
type: string
url:
- description: url is fully qualified URI with scheme
- https, that overrides the default generated endpoint
- for a client. This must be provided and cannot be
- empty.
+ description: |-
+ url is fully qualified URI with scheme https, that overrides the default generated
+ endpoint for a client.
+ This must be provided and cannot be empty.
pattern: ^https://
type: string
type: object
@@ -1146,9 +1271,10 @@ spec:
management in non-soverign clouds such as Azure Stack.
type: string
cloudName:
- description: cloudName is the name of the Azure cloud environment
- which can be used to configure the Azure SDK with the appropriate
- Azure API endpoints. If empty, the value is equal to `AzurePublicCloud`.
+ description: |-
+ cloudName is the name of the Azure cloud environment which can be used to configure the Azure SDK
+ with the appropriate Azure API endpoints.
+ If empty, the value is equal to `AzurePublicCloud`.
enum:
- ""
- AzurePublicCloud
@@ -1158,42 +1284,37 @@ spec:
- AzureStackCloud
type: string
networkResourceGroupName:
- description: networkResourceGroupName is the Resource Group
- for network resources like the Virtual Network and Subnets
- used by the cluster. If empty, the value is same as ResourceGroupName.
+ description: |-
+ networkResourceGroupName is the Resource Group for network resources like the Virtual Network and Subnets used by the cluster.
+ If empty, the value is same as ResourceGroupName.
type: string
resourceGroupName:
description: resourceGroupName is the Resource Group for new
Azure resources created for the cluster.
type: string
resourceTags:
- description: resourceTags is a list of additional tags to
- apply to Azure resources created for the cluster. See https://docs.microsoft.com/en-us/rest/api/resources/tags
- for information on tagging Azure resources. Due to limitations
- on Automation, Content Delivery Network, DNS Azure resources,
- a maximum of 15 tags may be applied. OpenShift reserves
- 5 tags for internal use, allowing 10 tags for user configuration.
+ description: |-
+ resourceTags is a list of additional tags to apply to Azure resources created for the cluster.
+ See https://docs.microsoft.com/en-us/rest/api/resources/tags for information on tagging Azure resources.
+ Due to limitations on Automation, Content Delivery Network, DNS Azure resources, a maximum of 15 tags
+ may be applied. OpenShift reserves 5 tags for internal use, allowing 10 tags for user configuration.
items:
description: AzureResourceTag is a tag to apply to Azure
resources created for the cluster.
properties:
key:
- description: key is the key part of the tag. A tag key
- can have a maximum of 128 characters and cannot be
- empty. Key must begin with a letter, end with a letter,
- number or underscore, and must contain only alphanumeric
- characters and the following special characters `_
- . -`.
+ description: |-
+ key is the key part of the tag. A tag key can have a maximum of 128 characters and cannot be empty. Key
+ must begin with a letter, end with a letter, number or underscore, and must contain only alphanumeric
+ characters and the following special characters `_ . -`.
maxLength: 128
minLength: 1
pattern: ^[a-zA-Z]([0-9A-Za-z_.-]*[0-9A-Za-z_])?$
type: string
value:
- description: 'value is the value part of the tag. A
- tag value can have a maximum of 256 characters and
- cannot be empty. Value must contain only alphanumeric
- characters and the following special characters `_
- + , - . / : ; < = > ? @`.'
+ description: |-
+ value is the value part of the tag. A tag value can have a maximum of 256 characters and cannot be empty. Value
+ must contain only alphanumeric characters and the following special characters `_ + , - . / : ; < = > ? @`.
maxLength: 256
minLength: 1
pattern: ^[0-9A-Za-z_.=+-@]+$
@@ -1219,22 +1340,21 @@ spec:
platform.
properties:
apiServerInternalIP:
- description: "apiServerInternalIP is an IP address to contact
- the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. It is the IP that the
- Infrastructure.status.apiServerInternalURI points to. It
- is the IP for a self-hosted load balancer in front of the
- API servers. \n Deprecated: Use APIServerInternalIPs instead."
+ description: |-
+ apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used
+ by components inside the cluster, like kubelets using the infrastructure rather
+ than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI
+ points to. It is the IP for a self-hosted load balancer in front of the API servers.
+
+ Deprecated: Use APIServerInternalIPs instead.
type: string
apiServerInternalIPs:
- description: apiServerInternalIPs are the IP addresses to
- contact the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. These are the IPs for
- a self-hosted load balancer in front of the API servers.
- In dual stack clusters this list contains two IPs otherwise
- only one.
+ description: |-
+ apiServerInternalIPs are the IP addresses to contact the Kubernetes API
+ server that can be used by components inside the cluster, like kubelets
+ using the infrastructure rather than Kubernetes networking. These are the
+ IPs for a self-hosted load balancer in front of the API servers. In dual
+ stack clusters this list contains two IPs otherwise only one.
format: ip
items:
type: string
@@ -1248,17 +1368,18 @@ spec:
&& isIP(self[1]) ? ip(self[0]).family() != ip(self[1]).family()
: true)'
ingressIP:
- description: "ingressIP is an external IP which routes to
- the default ingress controller. The IP is a suitable target
- of a wildcard DNS record used to resolve default route host
- names. \n Deprecated: Use IngressIPs instead."
+ description: |-
+ ingressIP is an external IP which routes to the default ingress controller.
+ The IP is a suitable target of a wildcard DNS record used to resolve default route host names.
+
+ Deprecated: Use IngressIPs instead.
type: string
ingressIPs:
- description: ingressIPs are the external IPs which route to
- the default ingress controller. The IPs are suitable targets
- of a wildcard DNS record used to resolve default route host
- names. In dual stack clusters this list contains two IPs
- otherwise only one.
+ description: |-
+ ingressIPs are the external IPs which route to the default ingress
+ controller. The IPs are suitable targets of a wildcard DNS record used to
+ resolve default route host names. In dual stack clusters this list
+ contains two IPs otherwise only one.
format: ip
items:
type: string
@@ -1279,18 +1400,16 @@ spec:
properties:
type:
default: OpenShiftManagedDefault
- description: type defines the type of load balancer used
- by the cluster on BareMetal platform which can be a
- user-managed or openshift-managed load balancer that
- is to be used for the OpenShift API and Ingress endpoints.
- When set to OpenShiftManagedDefault the static pods
- in charge of API and Ingress traffic load-balancing
+ description: |-
+ type defines the type of load balancer used by the cluster on BareMetal platform
+ which can be a user-managed or openshift-managed load balancer
+ that is to be used for the OpenShift API and Ingress endpoints.
+ When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing
defined in the machine config operator will be deployed.
- When set to UserManaged these static pods will not be
- deployed and it is expected that the load balancer is
- configured out of band by the deployer. When omitted,
- this means no opinion and the platform is left to choose
- a reasonable default. The default value is OpenShiftManagedDefault.
+ When set to UserManaged these static pods will not be deployed and it is expected that
+ the load balancer is configured out of band by the deployer.
+ When omitted, this means no opinion and the platform is left to choose a reasonable default.
+ The default value is OpenShiftManagedDefault.
enum:
- OpenShiftManagedDefault
- UserManaged
@@ -1317,13 +1436,13 @@ spec:
x-kubernetes-validations:
- rule: self.all(x, self.exists_one(y, x == y))
nodeDNSIP:
- description: nodeDNSIP is the IP address for the internal
- DNS used by the nodes. Unlike the one managed by the DNS
- operator, `NodeDNSIP` provides name resolution for the nodes
- themselves. There is no DNS-as-a-service for BareMetal deployments.
- In order to minimize necessary changes to the datacenter
- DNS, a DNS service is hosted as a static pod to serve those
- hostnames to the nodes in the cluster.
+ description: |-
+ nodeDNSIP is the IP address for the internal DNS used by the
+ nodes. Unlike the one managed by the DNS operator, `NodeDNSIP`
+ provides name resolution for the nodes themselves. There is no DNS-as-a-service for
+ BareMetal deployments. In order to minimize necessary changes to the
+ datacenter DNS, a DNS service is hosted as a static pod to serve those hostnames
+ to the nodes in the cluster.
type: string
type: object
equinixMetal:
@@ -1331,19 +1450,16 @@ spec:
Metal infrastructure provider.
properties:
apiServerInternalIP:
- description: apiServerInternalIP is an IP address to contact
- the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. It is the IP that the
- Infrastructure.status.apiServerInternalURI points to. It
- is the IP for a self-hosted load balancer in front of the
- API servers.
+ description: |-
+ apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used
+ by components inside the cluster, like kubelets using the infrastructure rather
+ than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI
+ points to. It is the IP for a self-hosted load balancer in front of the API servers.
type: string
ingressIP:
- description: ingressIP is an external IP which routes to the
- default ingress controller. The IP is a suitable target
- of a wildcard DNS record used to resolve default route host
- names.
+ description: |-
+ ingressIP is an external IP which routes to the default ingress controller.
+ The IP is a suitable target of a wildcard DNS record used to resolve default route host names.
type: string
type: object
external:
@@ -1351,23 +1467,22 @@ spec:
External infrastructure provider.
properties:
cloudControllerManager:
- description: cloudControllerManager contains settings specific
- to the external Cloud Controller Manager (a.k.a. CCM or
- CPI). When omitted, new nodes will be not tainted and no
- extra initialization from the cloud controller manager is
- expected.
+ description: |-
+ cloudControllerManager contains settings specific to the external Cloud Controller Manager (a.k.a. CCM or CPI).
+ When omitted, new nodes will be not tainted
+ and no extra initialization from the cloud controller manager is expected.
properties:
state:
- description: "state determines whether or not an external
- Cloud Controller Manager is expected to be installed
- within the cluster. https://kubernetes.io/docs/tasks/administer-cluster/running-cloud-controller/#running-cloud-controller-manager
- \n Valid values are \"External\", \"None\" and omitted.
- When set to \"External\", new nodes will be tainted
- as uninitialized when created, preventing them from
- running workloads until they are initialized by the
- cloud controller manager. When omitted or set to \"None\",
- new nodes will be not tainted and no extra initialization
- from the cloud controller manager is expected."
+ description: |-
+ state determines whether or not an external Cloud Controller Manager is expected to
+ be installed within the cluster.
+ https://kubernetes.io/docs/tasks/administer-cluster/running-cloud-controller/#running-cloud-controller-manager
+
+ Valid values are "External", "None" and omitted.
+ When set to "External", new nodes will be tainted as uninitialized when created,
+ preventing them from running workloads until they are initialized by the cloud controller manager.
+ When omitted or set to "None", new nodes will be not tainted
+ and no extra initialization from the cloud controller manager is expected.
enum:
- ""
- External
@@ -1393,27 +1508,26 @@ spec:
cloudLoadBalancerConfig:
default:
dnsType: PlatformDefault
- description: cloudLoadBalancerConfig is a union that contains
- the IP addresses of API, API-Int and Ingress Load Balancers
- created on the cloud platform. These values would not be
- populated on on-prem platforms. These Load Balancer IPs
- are used to configure the in-cluster DNS instances for API,
- API-Int and Ingress services. `dnsType` is expected to be
- set to `ClusterHosted` when these Load Balancer IP addresses
- are populated and used.
+ description: |-
+ cloudLoadBalancerConfig holds configuration related to DNS and cloud
+ load balancers. It allows configuration of in-cluster DNS as an alternative
+ to the platform default DNS implementation.
+ When using the ClusterHosted DNS type, Load Balancer IP addresses
+ must be provided for the API and internal API load balancers as well as the
+ ingress load balancer.
nullable: true
properties:
clusterHosted:
- description: clusterHosted holds the IP addresses of API,
- API-Int and Ingress Load Balancers on Cloud Platforms.
- The DNS solution hosted within the cluster use these
- IP addresses to provide resolution for API, API-Int
- and Ingress services.
+ description: |-
+ clusterHosted holds the IP addresses of API, API-Int and Ingress Load
+ Balancers on Cloud Platforms. The DNS solution hosted within the cluster
+ use these IP addresses to provide resolution for API, API-Int and Ingress
+ services.
properties:
apiIntLoadBalancerIPs:
- description: apiIntLoadBalancerIPs holds Load Balancer
- IPs for the internal API service. These Load Balancer
- IP addresses can be IPv4 and/or IPv6 addresses.
+ description: |-
+ apiIntLoadBalancerIPs holds Load Balancer IPs for the internal API service.
+ These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses.
Entries in the apiIntLoadBalancerIPs must be unique.
A maximum of 16 IP addresses are permitted.
format: ip
@@ -1430,12 +1544,12 @@ spec:
type: array
x-kubernetes-list-type: set
apiLoadBalancerIPs:
- description: apiLoadBalancerIPs holds Load Balancer
- IPs for the API service. These Load Balancer IP
- addresses can be IPv4 and/or IPv6 addresses. Could
- be empty for private clusters. Entries in the apiLoadBalancerIPs
- must be unique. A maximum of 16 IP addresses are
- permitted.
+ description: |-
+ apiLoadBalancerIPs holds Load Balancer IPs for the API service.
+ These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses.
+ Could be empty for private clusters.
+ Entries in the apiLoadBalancerIPs must be unique.
+ A maximum of 16 IP addresses are permitted.
format: ip
items:
description: IP is an IP address (for example, "10.0.0.0"
@@ -1450,11 +1564,11 @@ spec:
type: array
x-kubernetes-list-type: set
ingressLoadBalancerIPs:
- description: ingressLoadBalancerIPs holds IPs for
- Ingress Load Balancers. These Load Balancer IP addresses
- can be IPv4 and/or IPv6 addresses. Entries in the
- ingressLoadBalancerIPs must be unique. A maximum
- of 16 IP addresses are permitted.
+ description: |-
+ ingressLoadBalancerIPs holds IPs for Ingress Load Balancers.
+ These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses.
+ Entries in the ingressLoadBalancerIPs must be unique.
+ A maximum of 16 IP addresses are permitted.
format: ip
items:
description: IP is an IP address (for example, "10.0.0.0"
@@ -1471,23 +1585,17 @@ spec:
type: object
dnsType:
default: PlatformDefault
- description: dnsType indicates the type of DNS solution
- in use within the cluster. Its default value of `PlatformDefault`
- indicates that the cluster's DNS is the default provided
- by the cloud platform. It can be set to `ClusterHosted`
- to bypass the configuration of the cloud default DNS.
- In this mode, the cluster needs to provide a self-hosted
- DNS solution for the cluster's installation to succeed.
- The cluster's use of the cloud's Load Balancers is unaffected
- by this setting. The value is immutable after it has
- been set at install time. Currently, there is no way
- for the customer to add additional DNS entries into
- the cluster hosted DNS. Enabling this functionality
- allows the user to start their own DNS solution outside
- the cluster after installation is complete. The customer
- would be responsible for configuring this custom DNS
- solution, and it can be run in addition to the in-cluster
- DNS solution.
+ description: |-
+ dnsType indicates the type of DNS solution in use within the cluster. Its default value of
+ `PlatformDefault` indicates that the cluster's DNS is the default provided by the cloud platform.
+ It can be set to `ClusterHosted` to bypass the configuration of the cloud default DNS. In this mode,
+ the cluster needs to provide a self-hosted DNS solution for the cluster's installation to succeed.
+ The cluster's use of the cloud's Load Balancers is unaffected by this setting.
+ The value is immutable after it has been set at install time.
+ Currently, there is no way for the customer to add additional DNS entries into the cluster hosted DNS.
+ Enabling this functionality allows the user to start their own DNS solution outside the cluster after
+ installation is complete. The customer would be responsible for configuring this custom DNS solution,
+ and it can be run in addition to the in-cluster DNS solution.
enum:
- ClusterHosted
- PlatformDefault
@@ -1510,23 +1618,20 @@ spec:
created for the cluster.
type: string
resourceLabels:
- description: resourceLabels is a list of additional labels
- to apply to GCP resources created for the cluster. See https://cloud.google.com/compute/docs/labeling-resources
- for information on labeling GCP resources. GCP supports
- a maximum of 64 labels per resource. OpenShift reserves
- 32 labels for internal use, allowing 32 labels for user
- configuration.
+ description: |-
+ resourceLabels is a list of additional labels to apply to GCP resources created for the cluster.
+ See https://cloud.google.com/compute/docs/labeling-resources for information on labeling GCP resources.
+ GCP supports a maximum of 64 labels per resource. OpenShift reserves 32 labels for internal use,
+ allowing 32 labels for user configuration.
items:
description: GCPResourceLabel is a label to apply to GCP
resources created for the cluster.
properties:
key:
- description: key is the key part of the label. A label
- key can have a maximum of 63 characters and cannot
- be empty. Label key must begin with a lowercase letter,
- and must contain only lowercase letters, numeric characters,
- and the following special characters `_-`. Label key
- must not have the reserved prefixes `kubernetes-io`
+ description: |-
+ key is the key part of the label. A label key can have a maximum of 63 characters and cannot be empty.
+ Label key must begin with a lowercase letter, and must contain only lowercase letters, numeric characters,
+ and the following special characters `_-`. Label key must not have the reserved prefixes `kubernetes-io`
and `openshift-io`.
maxLength: 63
minLength: 1
@@ -1537,11 +1642,9 @@ spec:
or `kubernetes-io`
rule: '!self.startsWith(''openshift-io'') && !self.startsWith(''kubernetes-io'')'
value:
- description: value is the value part of the label. A
- label value can have a maximum of 63 characters and
- cannot be empty. Value must contain only lowercase
- letters, numeric characters, and the following special
- characters `_-`.
+ description: |-
+ value is the value part of the label. A label value can have a maximum of 63 characters and cannot be empty.
+ Value must contain only lowercase letters, numeric characters, and the following special characters `_-`.
maxLength: 63
minLength: 1
pattern: ^[0-9a-z_-]{1,63}$
@@ -1560,47 +1663,41 @@ spec:
during installation
rule: self.all(x, x in oldSelf) && oldSelf.all(x, x in self)
resourceTags:
- description: resourceTags is a list of additional tags to
- apply to GCP resources created for the cluster. See https://cloud.google.com/resource-manager/docs/tags/tags-overview
- for information on tagging GCP resources. GCP supports a
- maximum of 50 tags per resource.
+ description: |-
+ resourceTags is a list of additional tags to apply to GCP resources created for the cluster.
+ See https://cloud.google.com/resource-manager/docs/tags/tags-overview for information on
+ tagging GCP resources. GCP supports a maximum of 50 tags per resource.
items:
description: GCPResourceTag is a tag to apply to GCP resources
created for the cluster.
properties:
key:
- description: key is the key part of the tag. A tag key
- can have a maximum of 63 characters and cannot be
- empty. Tag key must begin and end with an alphanumeric
- character, and must contain only uppercase, lowercase
- alphanumeric characters, and the following special
- characters `._-`.
+ description: |-
+ key is the key part of the tag. A tag key can have a maximum of 63 characters and cannot be empty.
+ Tag key must begin and end with an alphanumeric character, and must contain only uppercase, lowercase
+ alphanumeric characters, and the following special characters `._-`.
maxLength: 63
minLength: 1
pattern: ^[a-zA-Z0-9]([0-9A-Za-z_.-]{0,61}[a-zA-Z0-9])?$
type: string
parentID:
- description: 'parentID is the ID of the hierarchical
- resource where the tags are defined, e.g. at the Organization
- or the Project level. To find the Organization or
- Project ID refer to the following pages: https://cloud.google.com/resource-manager/docs/creating-managing-organization#retrieving_your_organization_id,
+ description: |-
+ parentID is the ID of the hierarchical resource where the tags are defined,
+ e.g. at the Organization or the Project level. To find the Organization or Project ID refer to the following pages:
+ https://cloud.google.com/resource-manager/docs/creating-managing-organization#retrieving_your_organization_id,
https://cloud.google.com/resource-manager/docs/creating-managing-projects#identifying_projects.
- An OrganizationID must consist of decimal numbers,
- and cannot have leading zeroes. A ProjectID must be
- 6 to 30 characters in length, can only contain lowercase
- letters, numbers, and hyphens, and must start with
- a letter, and cannot end with a hyphen.'
+ An OrganizationID must consist of decimal numbers, and cannot have leading zeroes.
+ A ProjectID must be 6 to 30 characters in length, can only contain lowercase letters, numbers,
+ and hyphens, and must start with a letter, and cannot end with a hyphen.
maxLength: 32
minLength: 1
pattern: (^[1-9][0-9]{0,31}$)|(^[a-z][a-z0-9-]{4,28}[a-z0-9]$)
type: string
value:
- description: value is the value part of the tag. A tag
- value can have a maximum of 63 characters and cannot
- be empty. Tag value must begin and end with an alphanumeric
- character, and must contain only uppercase, lowercase
- alphanumeric characters, and the following special
- characters `_-.@%=+:,*#&(){}[]` and spaces.
+ description: |-
+ value is the value part of the tag. A tag value can have a maximum of 63 characters and cannot be empty.
+ Tag value must begin and end with an alphanumeric character, and must contain only uppercase, lowercase
+ alphanumeric characters, and the following special characters `_-.@%=+:,*#&(){}[]` and spaces.
maxLength: 63
minLength: 1
pattern: ^[a-zA-Z0-9]([0-9A-Za-z_.@%=+:,*#&()\[\]{}\-\s]{0,61}[a-zA-Z0-9])?$
@@ -1632,13 +1729,14 @@ spec:
infrastructure provider.
properties:
cisInstanceCRN:
- description: CISInstanceCRN is the CRN of the Cloud Internet
- Services instance managing the DNS zone for the cluster's
- base domain
+ description: |-
+ CISInstanceCRN is the CRN of the Cloud Internet Services instance managing
+ the DNS zone for the cluster's base domain
type: string
dnsInstanceCRN:
- description: DNSInstanceCRN is the CRN of the DNS Services
- instance managing the DNS zone for the cluster's base domain
+ description: |-
+ DNSInstanceCRN is the CRN of the DNS Services instance managing the DNS zone
+ for the cluster's base domain
type: string
location:
description: Location is where the cluster has been deployed
@@ -1652,26 +1750,23 @@ spec:
IBMCloud resources created for the cluster.
type: string
serviceEndpoints:
- description: serviceEndpoints is a list of custom endpoints
- which will override the default service endpoints of an
- IBM Cloud service. These endpoints are consumed by components
- within the cluster to reach the respective IBM Cloud Services.
+ description: |-
+ serviceEndpoints is a list of custom endpoints which will override the default
+ service endpoints of an IBM Cloud service. These endpoints are consumed by
+ components within the cluster to reach the respective IBM Cloud Services.
items:
- description: IBMCloudServiceEndpoint stores the configuration
- of a custom url to override existing defaults of IBM Cloud
- Services.
+ description: |-
+ IBMCloudServiceEndpoint stores the configuration of a custom url to
+ override existing defaults of IBM Cloud Services.
properties:
name:
- description: 'name is the name of the IBM Cloud service.
- Possible values are: CIS, COS, COSConfig, DNSServices,
- GlobalCatalog, GlobalSearch, GlobalTagging, HyperProtect,
- IAM, KeyProtect, ResourceController, ResourceManager,
- or VPC. For example, the IBM Cloud Private IAM service
- could be configured with the service `name` of `IAM`
- and `url` of `https://private.iam.cloud.ibm.com` Whereas
- the IBM Cloud Private VPC service for US South (Dallas)
- could be configured with the service `name` of `VPC`
- and `url` of `https://us.south.private.iaas.cloud.ibm.com`'
+ description: |-
+ name is the name of the IBM Cloud service.
+ Possible values are: CIS, COS, COSConfig, DNSServices, GlobalCatalog, GlobalSearch, GlobalTagging, HyperProtect, IAM, KeyProtect, ResourceController, ResourceManager, or VPC.
+ For example, the IBM Cloud Private IAM service could be configured with the
+ service `name` of `IAM` and `url` of `https://private.iam.cloud.ibm.com`
+ Whereas the IBM Cloud Private VPC service for US South (Dallas) could be configured
+ with the service `name` of `VPC` and `url` of `https://us.south.private.iaas.cloud.ibm.com`
enum:
- CIS
- COS
@@ -1688,10 +1783,10 @@ spec:
- VPC
type: string
url:
- description: url is fully qualified URI with scheme
- https, that overrides the default generated endpoint
- for a client. This must be provided and cannot be
- empty.
+ description: |-
+ url is fully qualified URI with scheme https, that overrides the default generated
+ endpoint for a client.
+ This must be provided and cannot be empty.
type: string
x-kubernetes-validations:
- message: url must be a valid absolute URL
@@ -1710,19 +1805,16 @@ spec:
infrastructure provider.
properties:
apiServerInternalIP:
- description: apiServerInternalIP is an IP address to contact
- the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. It is the IP that the
- Infrastructure.status.apiServerInternalURI points to. It
- is the IP for a self-hosted load balancer in front of the
- API servers.
+ description: |-
+ apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used
+ by components inside the cluster, like kubelets using the infrastructure rather
+ than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI
+ points to. It is the IP for a self-hosted load balancer in front of the API servers.
type: string
ingressIP:
- description: ingressIP is an external IP which routes to the
- default ingress controller. The IP is a suitable target
- of a wildcard DNS record used to resolve default route host
- names.
+ description: |-
+ ingressIP is an external IP which routes to the default ingress controller.
+ The IP is a suitable target of a wildcard DNS record used to resolve default route host names.
type: string
type: object
nutanix:
@@ -1730,22 +1822,21 @@ spec:
infrastructure provider.
properties:
apiServerInternalIP:
- description: "apiServerInternalIP is an IP address to contact
- the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. It is the IP that the
- Infrastructure.status.apiServerInternalURI points to. It
- is the IP for a self-hosted load balancer in front of the
- API servers. \n Deprecated: Use APIServerInternalIPs instead."
+ description: |-
+ apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used
+ by components inside the cluster, like kubelets using the infrastructure rather
+ than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI
+ points to. It is the IP for a self-hosted load balancer in front of the API servers.
+
+ Deprecated: Use APIServerInternalIPs instead.
type: string
apiServerInternalIPs:
- description: apiServerInternalIPs are the IP addresses to
- contact the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. These are the IPs for
- a self-hosted load balancer in front of the API servers.
- In dual stack clusters this list contains two IPs otherwise
- only one.
+ description: |-
+ apiServerInternalIPs are the IP addresses to contact the Kubernetes API
+ server that can be used by components inside the cluster, like kubelets
+ using the infrastructure rather than Kubernetes networking. These are the
+ IPs for a self-hosted load balancer in front of the API servers. In dual
+ stack clusters this list contains two IPs otherwise only one.
format: ip
items:
type: string
@@ -1759,17 +1850,18 @@ spec:
&& isIP(self[1]) ? ip(self[0]).family() != ip(self[1]).family()
: true)'
ingressIP:
- description: "ingressIP is an external IP which routes to
- the default ingress controller. The IP is a suitable target
- of a wildcard DNS record used to resolve default route host
- names. \n Deprecated: Use IngressIPs instead."
+ description: |-
+ ingressIP is an external IP which routes to the default ingress controller.
+ The IP is a suitable target of a wildcard DNS record used to resolve default route host names.
+
+ Deprecated: Use IngressIPs instead.
type: string
ingressIPs:
- description: ingressIPs are the external IPs which route to
- the default ingress controller. The IPs are suitable targets
- of a wildcard DNS record used to resolve default route host
- names. In dual stack clusters this list contains two IPs
- otherwise only one.
+ description: |-
+ ingressIPs are the external IPs which route to the default ingress
+ controller. The IPs are suitable targets of a wildcard DNS record used to
+ resolve default route host names. In dual stack clusters this list
+ contains two IPs otherwise only one.
format: ip
items:
type: string
@@ -1790,18 +1882,16 @@ spec:
properties:
type:
default: OpenShiftManagedDefault
- description: type defines the type of load balancer used
- by the cluster on Nutanix platform which can be a user-managed
- or openshift-managed load balancer that is to be used
- for the OpenShift API and Ingress endpoints. When set
- to OpenShiftManagedDefault the static pods in charge
- of API and Ingress traffic load-balancing defined in
- the machine config operator will be deployed. When set
- to UserManaged these static pods will not be deployed
- and it is expected that the load balancer is configured
- out of band by the deployer. When omitted, this means
- no opinion and the platform is left to choose a reasonable
- default. The default value is OpenShiftManagedDefault.
+ description: |-
+ type defines the type of load balancer used by the cluster on Nutanix platform
+ which can be a user-managed or openshift-managed load balancer
+ that is to be used for the OpenShift API and Ingress endpoints.
+ When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing
+ defined in the machine config operator will be deployed.
+ When set to UserManaged these static pods will not be deployed and it is expected that
+ the load balancer is configured out of band by the deployer.
+ When omitted, this means no opinion and the platform is left to choose a reasonable default.
+ The default value is OpenShiftManagedDefault.
enum:
- OpenShiftManagedDefault
- UserManaged
@@ -1816,22 +1906,21 @@ spec:
infrastructure provider.
properties:
apiServerInternalIP:
- description: "apiServerInternalIP is an IP address to contact
- the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. It is the IP that the
- Infrastructure.status.apiServerInternalURI points to. It
- is the IP for a self-hosted load balancer in front of the
- API servers. \n Deprecated: Use APIServerInternalIPs instead."
+ description: |-
+ apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used
+ by components inside the cluster, like kubelets using the infrastructure rather
+ than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI
+ points to. It is the IP for a self-hosted load balancer in front of the API servers.
+
+ Deprecated: Use APIServerInternalIPs instead.
type: string
apiServerInternalIPs:
- description: apiServerInternalIPs are the IP addresses to
- contact the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. These are the IPs for
- a self-hosted load balancer in front of the API servers.
- In dual stack clusters this list contains two IPs otherwise
- only one.
+ description: |-
+ apiServerInternalIPs are the IP addresses to contact the Kubernetes API
+ server that can be used by components inside the cluster, like kubelets
+ using the infrastructure rather than Kubernetes networking. These are the
+ IPs for a self-hosted load balancer in front of the API servers. In dual
+ stack clusters this list contains two IPs otherwise only one.
format: ip
items:
type: string
@@ -1845,21 +1934,23 @@ spec:
&& isIP(self[1]) ? ip(self[0]).family() != ip(self[1]).family()
: true)'
cloudName:
- description: cloudName is the name of the desired OpenStack
- cloud in the client configuration file (`clouds.yaml`).
+ description: |-
+ cloudName is the name of the desired OpenStack cloud in the
+ client configuration file (`clouds.yaml`).
type: string
ingressIP:
- description: "ingressIP is an external IP which routes to
- the default ingress controller. The IP is a suitable target
- of a wildcard DNS record used to resolve default route host
- names. \n Deprecated: Use IngressIPs instead."
+ description: |-
+ ingressIP is an external IP which routes to the default ingress controller.
+ The IP is a suitable target of a wildcard DNS record used to resolve default route host names.
+
+ Deprecated: Use IngressIPs instead.
type: string
ingressIPs:
- description: ingressIPs are the external IPs which route to
- the default ingress controller. The IPs are suitable targets
- of a wildcard DNS record used to resolve default route host
- names. In dual stack clusters this list contains two IPs
- otherwise only one.
+ description: |-
+ ingressIPs are the external IPs which route to the default ingress
+ controller. The IPs are suitable targets of a wildcard DNS record used to
+ resolve default route host names. In dual stack clusters this list
+ contains two IPs otherwise only one.
format: ip
items:
type: string
@@ -1880,18 +1971,16 @@ spec:
properties:
type:
default: OpenShiftManagedDefault
- description: type defines the type of load balancer used
- by the cluster on OpenStack platform which can be a
- user-managed or openshift-managed load balancer that
- is to be used for the OpenShift API and Ingress endpoints.
- When set to OpenShiftManagedDefault the static pods
- in charge of API and Ingress traffic load-balancing
+ description: |-
+ type defines the type of load balancer used by the cluster on OpenStack platform
+ which can be a user-managed or openshift-managed load balancer
+ that is to be used for the OpenShift API and Ingress endpoints.
+ When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing
defined in the machine config operator will be deployed.
- When set to UserManaged these static pods will not be
- deployed and it is expected that the load balancer is
- configured out of band by the deployer. When omitted,
- this means no opinion and the platform is left to choose
- a reasonable default. The default value is OpenShiftManagedDefault.
+ When set to UserManaged these static pods will not be deployed and it is expected that
+ the load balancer is configured out of band by the deployer.
+ When omitted, this means no opinion and the platform is left to choose a reasonable default.
+ The default value is OpenShiftManagedDefault.
enum:
- OpenShiftManagedDefault
- UserManaged
@@ -1918,13 +2007,13 @@ spec:
x-kubernetes-validations:
- rule: self.all(x, self.exists_one(y, x == y))
nodeDNSIP:
- description: nodeDNSIP is the IP address for the internal
- DNS used by the nodes. Unlike the one managed by the DNS
- operator, `NodeDNSIP` provides name resolution for the nodes
- themselves. There is no DNS-as-a-service for OpenStack deployments.
- In order to minimize necessary changes to the datacenter
- DNS, a DNS service is hosted as a static pod to serve those
- hostnames to the nodes in the cluster.
+ description: |-
+ nodeDNSIP is the IP address for the internal DNS used by the
+ nodes. Unlike the one managed by the DNS operator, `NodeDNSIP`
+ provides name resolution for the nodes themselves. There is no DNS-as-a-service for
+ OpenStack deployments. In order to minimize necessary changes to the
+ datacenter DNS, a DNS service is hosted as a static pod to serve those hostnames
+ to the nodes in the cluster.
type: string
type: object
ovirt:
@@ -1932,22 +2021,21 @@ spec:
provider.
properties:
apiServerInternalIP:
- description: "apiServerInternalIP is an IP address to contact
- the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. It is the IP that the
- Infrastructure.status.apiServerInternalURI points to. It
- is the IP for a self-hosted load balancer in front of the
- API servers. \n Deprecated: Use APIServerInternalIPs instead."
+ description: |-
+ apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used
+ by components inside the cluster, like kubelets using the infrastructure rather
+ than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI
+ points to. It is the IP for a self-hosted load balancer in front of the API servers.
+
+ Deprecated: Use APIServerInternalIPs instead.
type: string
apiServerInternalIPs:
- description: apiServerInternalIPs are the IP addresses to
- contact the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. These are the IPs for
- a self-hosted load balancer in front of the API servers.
- In dual stack clusters this list contains two IPs otherwise
- only one.
+ description: |-
+ apiServerInternalIPs are the IP addresses to contact the Kubernetes API
+ server that can be used by components inside the cluster, like kubelets
+ using the infrastructure rather than Kubernetes networking. These are the
+ IPs for a self-hosted load balancer in front of the API servers. In dual
+ stack clusters this list contains two IPs otherwise only one.
format: ip
items:
type: string
@@ -1961,17 +2049,18 @@ spec:
&& isIP(self[1]) ? ip(self[0]).family() != ip(self[1]).family()
: true)'
ingressIP:
- description: "ingressIP is an external IP which routes to
- the default ingress controller. The IP is a suitable target
- of a wildcard DNS record used to resolve default route host
- names. \n Deprecated: Use IngressIPs instead."
+ description: |-
+ ingressIP is an external IP which routes to the default ingress controller.
+ The IP is a suitable target of a wildcard DNS record used to resolve default route host names.
+
+ Deprecated: Use IngressIPs instead.
type: string
ingressIPs:
- description: ingressIPs are the external IPs which route to
- the default ingress controller. The IPs are suitable targets
- of a wildcard DNS record used to resolve default route host
- names. In dual stack clusters this list contains two IPs
- otherwise only one.
+ description: |-
+ ingressIPs are the external IPs which route to the default ingress
+ controller. The IPs are suitable targets of a wildcard DNS record used to
+ resolve default route host names. In dual stack clusters this list
+ contains two IPs otherwise only one.
format: ip
items:
type: string
@@ -1992,18 +2081,16 @@ spec:
properties:
type:
default: OpenShiftManagedDefault
- description: type defines the type of load balancer used
- by the cluster on Ovirt platform which can be a user-managed
- or openshift-managed load balancer that is to be used
- for the OpenShift API and Ingress endpoints. When set
- to OpenShiftManagedDefault the static pods in charge
- of API and Ingress traffic load-balancing defined in
- the machine config operator will be deployed. When set
- to UserManaged these static pods will not be deployed
- and it is expected that the load balancer is configured
- out of band by the deployer. When omitted, this means
- no opinion and the platform is left to choose a reasonable
- default. The default value is OpenShiftManagedDefault.
+ description: |-
+ type defines the type of load balancer used by the cluster on Ovirt platform
+ which can be a user-managed or openshift-managed load balancer
+ that is to be used for the OpenShift API and Ingress endpoints.
+ When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing
+ defined in the machine config operator will be deployed.
+ When set to UserManaged these static pods will not be deployed and it is expected that
+ the load balancer is configured out of band by the deployer.
+ When omitted, this means no opinion and the platform is left to choose a reasonable default.
+ The default value is OpenShiftManagedDefault.
enum:
- OpenShiftManagedDefault
- UserManaged
@@ -2022,27 +2109,26 @@ spec:
Virtual Servers infrastructure provider.
properties:
cisInstanceCRN:
- description: CISInstanceCRN is the CRN of the Cloud Internet
- Services instance managing the DNS zone for the cluster's
- base domain
+ description: |-
+ CISInstanceCRN is the CRN of the Cloud Internet Services instance managing
+ the DNS zone for the cluster's base domain
type: string
dnsInstanceCRN:
- description: DNSInstanceCRN is the CRN of the DNS Services
- instance managing the DNS zone for the cluster's base domain
+ description: |-
+ DNSInstanceCRN is the CRN of the DNS Services instance managing the DNS zone
+ for the cluster's base domain
type: string
region:
description: region holds the default Power VS region for
new Power VS resources created by the cluster.
type: string
resourceGroup:
- description: 'resourceGroup is the resource group name for
- new IBMCloud resources created for a cluster. The resource
- group specified here will be used by cluster-image-registry-operator
- to set up a COS Instance in IBMCloud for the cluster registry.
+ description: |-
+ resourceGroup is the resource group name for new IBMCloud resources created for a cluster.
+ The resource group specified here will be used by cluster-image-registry-operator to set up a COS Instance in IBMCloud for the cluster registry.
More about resource groups can be found here: https://cloud.ibm.com/docs/account?topic=account-rgs.
- When omitted, the image registry operator won''t be able
- to configure storage, which results in the image registry
- cluster operator not being in an available state.'
+ When omitted, the image registry operator won't be able to configure storage,
+ which results in the image registry cluster operator not being in an available state.
maxLength: 40
pattern: ^[a-zA-Z0-9-_ ]+$
type: string
@@ -2050,26 +2136,42 @@ spec:
- message: resourceGroup is immutable once set
rule: oldSelf == '' || self == oldSelf
serviceEndpoints:
- description: serviceEndpoints is a list of custom endpoints
- which will override the default service endpoints of a Power
- VS service.
+ description: |-
+ serviceEndpoints is a list of custom endpoints which will override the default
+ service endpoints of a Power VS service.
items:
- description: PowervsServiceEndpoint stores the configuration
- of a custom url to override existing defaults of PowerVS
- Services.
+ description: |-
+ PowervsServiceEndpoint stores the configuration of a custom url to
+ override existing defaults of PowerVS Services.
properties:
name:
- description: name is the name of the Power VS service.
- Few of the services are IAM - https://cloud.ibm.com/apidocs/iam-identity-token-api
+ description: |-
+ name is the name of the Power VS service.
+ Few of the services are
+ IAM - https://cloud.ibm.com/apidocs/iam-identity-token-api
ResourceController - https://cloud.ibm.com/apidocs/resource-controller/resource-controller
Power Cloud - https://cloud.ibm.com/apidocs/power-cloud
- pattern: ^[a-z0-9-]+$
+ enum:
+ - CIS
+ - COS
+ - COSConfig
+ - DNSServices
+ - GlobalCatalog
+ - GlobalSearch
+ - GlobalTagging
+ - HyperProtect
+ - IAM
+ - KeyProtect
+ - Power
+ - ResourceController
+ - ResourceManager
+ - VPC
type: string
url:
- description: url is fully qualified URI with scheme
- https, that overrides the default generated endpoint
- for a client. This must be provided and cannot be
- empty.
+ description: |-
+ url is fully qualified URI with scheme https, that overrides the default generated
+ endpoint for a client.
+ This must be provided and cannot be empty.
format: uri
pattern: ^https://
type: string
@@ -2082,27 +2184,27 @@ spec:
- name
x-kubernetes-list-type: map
zone:
- description: 'zone holds the default zone for the new Power
- VS resources created by the cluster. Note: Currently only
- single-zone OCP clusters are supported'
+ description: |-
+ zone holds the default zone for the new Power VS resources created by the cluster.
+ Note: Currently only single-zone OCP clusters are supported
type: string
type: object
x-kubernetes-validations:
- message: cannot unset resourceGroup once set
rule: '!has(oldSelf.resourceGroup) || has(self.resourceGroup)'
type:
- description: "type is the underlying infrastructure provider for
- the cluster. This value controls whether infrastructure automation
- such as service load balancers, dynamic volume provisioning,
- machine creation and deletion, and other integrations are enabled.
- If None, no infrastructure automation is enabled. Allowed values
- are \"AWS\", \"Azure\", \"BareMetal\", \"GCP\", \"Libvirt\",
- \"OpenStack\", \"VSphere\", \"oVirt\", \"EquinixMetal\", \"PowerVS\",
- \"AlibabaCloud\", \"Nutanix\" and \"None\". Individual components
- may not support all platforms, and must handle unrecognized
- platforms as None if they do not support that platform. \n This
- value will be synced with to the `status.platform` and `status.platformStatus.type`.
- Currently this value cannot be changed once set."
+ description: |-
+ type is the underlying infrastructure provider for the cluster. This
+ value controls whether infrastructure automation such as service load
+ balancers, dynamic volume provisioning, machine creation and deletion, and
+ other integrations are enabled. If None, no infrastructure automation is
+ enabled. Allowed values are "AWS", "Azure", "BareMetal", "GCP", "Libvirt",
+ "OpenStack", "VSphere", "oVirt", "EquinixMetal", "PowerVS", "AlibabaCloud", "Nutanix" and "None".
+ Individual components may not support all platforms, and must handle
+ unrecognized platforms as None if they do not support that platform.
+
+ This value will be synced with to the `status.platform` and `status.platformStatus.type`.
+ Currently this value cannot be changed once set.
enum:
- ""
- AWS
@@ -2127,22 +2229,21 @@ spec:
infrastructure provider.
properties:
apiServerInternalIP:
- description: "apiServerInternalIP is an IP address to contact
- the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. It is the IP that the
- Infrastructure.status.apiServerInternalURI points to. It
- is the IP for a self-hosted load balancer in front of the
- API servers. \n Deprecated: Use APIServerInternalIPs instead."
+ description: |-
+ apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used
+ by components inside the cluster, like kubelets using the infrastructure rather
+ than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI
+ points to. It is the IP for a self-hosted load balancer in front of the API servers.
+
+ Deprecated: Use APIServerInternalIPs instead.
type: string
apiServerInternalIPs:
- description: apiServerInternalIPs are the IP addresses to
- contact the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. These are the IPs for
- a self-hosted load balancer in front of the API servers.
- In dual stack clusters this list contains two IPs otherwise
- only one.
+ description: |-
+ apiServerInternalIPs are the IP addresses to contact the Kubernetes API
+ server that can be used by components inside the cluster, like kubelets
+ using the infrastructure rather than Kubernetes networking. These are the
+ IPs for a self-hosted load balancer in front of the API servers. In dual
+ stack clusters this list contains two IPs otherwise only one.
format: ip
items:
type: string
@@ -2156,17 +2257,18 @@ spec:
&& isIP(self[1]) ? ip(self[0]).family() != ip(self[1]).family()
: true)'
ingressIP:
- description: "ingressIP is an external IP which routes to
- the default ingress controller. The IP is a suitable target
- of a wildcard DNS record used to resolve default route host
- names. \n Deprecated: Use IngressIPs instead."
+ description: |-
+ ingressIP is an external IP which routes to the default ingress controller.
+ The IP is a suitable target of a wildcard DNS record used to resolve default route host names.
+
+ Deprecated: Use IngressIPs instead.
type: string
ingressIPs:
- description: ingressIPs are the external IPs which route to
- the default ingress controller. The IPs are suitable targets
- of a wildcard DNS record used to resolve default route host
- names. In dual stack clusters this list contains two IPs
- otherwise only one.
+ description: |-
+ ingressIPs are the external IPs which route to the default ingress
+ controller. The IPs are suitable targets of a wildcard DNS record used to
+ resolve default route host names. In dual stack clusters this list
+ contains two IPs otherwise only one.
format: ip
items:
type: string
@@ -2187,18 +2289,16 @@ spec:
properties:
type:
default: OpenShiftManagedDefault
- description: type defines the type of load balancer used
- by the cluster on VSphere platform which can be a user-managed
- or openshift-managed load balancer that is to be used
- for the OpenShift API and Ingress endpoints. When set
- to OpenShiftManagedDefault the static pods in charge
- of API and Ingress traffic load-balancing defined in
- the machine config operator will be deployed. When set
- to UserManaged these static pods will not be deployed
- and it is expected that the load balancer is configured
- out of band by the deployer. When omitted, this means
- no opinion and the platform is left to choose a reasonable
- default. The default value is OpenShiftManagedDefault.
+ description: |-
+ type defines the type of load balancer used by the cluster on VSphere platform
+ which can be a user-managed or openshift-managed load balancer
+ that is to be used for the OpenShift API and Ingress endpoints.
+ When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing
+ defined in the machine config operator will be deployed.
+ When set to UserManaged these static pods will not be deployed and it is expected that
+ the load balancer is configured out of band by the deployer.
+ When omitted, this means no opinion and the platform is left to choose a reasonable default.
+ The default value is OpenShiftManagedDefault.
enum:
- OpenShiftManagedDefault
- UserManaged
@@ -2225,13 +2325,13 @@ spec:
x-kubernetes-validations:
- rule: self.all(x, self.exists_one(y, x == y))
nodeDNSIP:
- description: nodeDNSIP is the IP address for the internal
- DNS used by the nodes. Unlike the one managed by the DNS
- operator, `NodeDNSIP` provides name resolution for the nodes
- themselves. There is no DNS-as-a-service for vSphere deployments.
- In order to minimize necessary changes to the datacenter
- DNS, a DNS service is hosted as a static pod to serve those
- hostnames to the nodes in the cluster.
+ description: |-
+ nodeDNSIP is the IP address for the internal DNS used by the
+ nodes. Unlike the one managed by the DNS operator, `NodeDNSIP`
+ provides name resolution for the nodes themselves. There is no DNS-as-a-service for
+ vSphere deployments. In order to minimize necessary changes to the
+ datacenter DNS, a DNS service is hosted as a static pod to serve those hostnames
+ to the nodes in the cluster.
type: string
type: object
type: object
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_infrastructures-Default.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_infrastructures-Default.crd.yaml
index 7683c071431bdfc110baba1eea75b8fc340d1503..3f03d50cd25bc03ef88f48e9cab4c1c2f8ffe726 100644
--- a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_infrastructures-Default.crd.yaml
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_infrastructures-Default.crd.yaml
@@ -21,20 +21,25 @@ spec:
- name: v1
schema:
openAPIV3Schema:
- description: "Infrastructure holds cluster-wide information about Infrastructure.
- \ The canonical name is `cluster` \n Compatibility level 1: Stable within
- a major release for a minimum of 12 months or 3 minor releases (whichever
- is longer)."
+ description: |-
+ Infrastructure holds cluster-wide information about Infrastructure. The canonical name is `cluster`
+
+ Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -42,19 +47,19 @@ spec:
description: spec holds user settable values for configuration
properties:
cloudConfig:
- description: "cloudConfig is a reference to a ConfigMap containing
- the cloud provider configuration file. This configuration file is
- used to configure the Kubernetes cloud provider integration when
- using the built-in cloud provider integration or the external cloud
- controller manager. The namespace for this config map is openshift-config.
- \n cloudConfig should only be consumed by the kube_cloud_config
- controller. The controller is responsible for using the user configuration
- in the spec for various platforms and combining that with the user
- provided ConfigMap in this field to create a stitched kube cloud
- config. The controller generates a ConfigMap `kube-cloud-config`
- in `openshift-config-managed` namespace with the kube cloud config
- is stored in `cloud.conf` key. All the clients are expected to use
- the generated ConfigMap only."
+ description: |-
+ cloudConfig is a reference to a ConfigMap containing the cloud provider configuration file.
+ This configuration file is used to configure the Kubernetes cloud provider integration
+ when using the built-in cloud provider integration or the external cloud controller manager.
+ The namespace for this config map is openshift-config.
+
+ cloudConfig should only be consumed by the kube_cloud_config controller.
+ The controller is responsible for using the user configuration in the spec
+ for various platforms and combining that with the user provided ConfigMap in this field
+ to create a stitched kube cloud config.
+ The controller generates a ConfigMap `kube-cloud-config` in `openshift-config-managed` namespace
+ with the kube cloud config is stored in `cloud.conf` key.
+ All the clients are expected to use the generated ConfigMap only.
properties:
key:
description: Key allows pointing to a specific key/value inside
@@ -64,8 +69,9 @@ spec:
type: string
type: object
platformSpec:
- description: platformSpec holds desired information specific to the
- underlying infrastructure provider.
+ description: |-
+ platformSpec holds desired information specific to the underlying
+ infrastructure provider.
properties:
alibabaCloud:
description: AlibabaCloud contains settings specific to the Alibaba
@@ -76,24 +82,27 @@ spec:
Services infrastructure provider.
properties:
serviceEndpoints:
- description: serviceEndpoints list contains custom endpoints
- which will override default service endpoint of AWS Services.
+ description: |-
+ serviceEndpoints list contains custom endpoints which will override default
+ service endpoint of AWS Services.
There must be only one ServiceEndpoint for a service.
items:
- description: AWSServiceEndpoint store the configuration
- of a custom url to override existing defaults of AWS Services.
+ description: |-
+ AWSServiceEndpoint store the configuration of a custom url to
+ override existing defaults of AWS Services.
properties:
name:
- description: name is the name of the AWS service. The
- list of all the service names can be found at https://docs.aws.amazon.com/general/latest/gr/aws-service-information.html
+ description: |-
+ name is the name of the AWS service.
+ The list of all the service names can be found at https://docs.aws.amazon.com/general/latest/gr/aws-service-information.html
This must be provided and cannot be empty.
pattern: ^[a-z0-9-]+$
type: string
url:
- description: url is fully qualified URI with scheme
- https, that overrides the default generated endpoint
- for a client. This must be provided and cannot be
- empty.
+ description: |-
+ url is fully qualified URI with scheme https, that overrides the default generated
+ endpoint for a client.
+ This must be provided and cannot be empty.
pattern: ^https://
type: string
type: object
@@ -109,17 +118,16 @@ spec:
platform.
properties:
apiServerInternalIPs:
- description: apiServerInternalIPs are the IP addresses to
- contact the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. These are the IPs for
- a self-hosted load balancer in front of the API servers.
- In dual stack clusters this list contains two IP addresses,
- one from IPv4 family and one from IPv6. In single stack
- clusters a single IP address is expected. When omitted,
- values from the status.apiServerInternalIPs will be used.
- Once set, the list cannot be completely removed (but its
- second entry can).
+ description: |-
+ apiServerInternalIPs are the IP addresses to contact the Kubernetes API
+ server that can be used by components inside the cluster, like kubelets
+ using the infrastructure rather than Kubernetes networking. These are the
+ IPs for a self-hosted load balancer in front of the API servers.
+ In dual stack clusters this list contains two IP addresses, one from IPv4
+ family and one from IPv6.
+ In single stack clusters a single IP address is expected.
+ When omitted, values from the status.apiServerInternalIPs will be used.
+ Once set, the list cannot be completely removed (but its second entry can).
items:
description: IP is an IP address (for example, "10.0.0.0"
or "fd00::").
@@ -138,15 +146,15 @@ spec:
rule: 'size(self) == 2 && isIP(self[0]) && isIP(self[1])
? ip(self[0]).family() != ip(self[1]).family() : true'
ingressIPs:
- description: ingressIPs are the external IPs which route to
- the default ingress controller. The IPs are suitable targets
- of a wildcard DNS record used to resolve default route host
- names. In dual stack clusters this list contains two IP
- addresses, one from IPv4 family and one from IPv6. In single
- stack clusters a single IP address is expected. When omitted,
- values from the status.ingressIPs will be used. Once set,
- the list cannot be completely removed (but its second entry
- can).
+ description: |-
+ ingressIPs are the external IPs which route to the default ingress
+ controller. The IPs are suitable targets of a wildcard DNS record used to
+ resolve default route host names.
+ In dual stack clusters this list contains two IP addresses, one from IPv4
+ family and one from IPv6.
+ In single stack clusters a single IP address is expected.
+ When omitted, values from the status.ingressIPs will be used.
+ Once set, the list cannot be completely removed (but its second entry can).
items:
description: IP is an IP address (for example, "10.0.0.0"
or "fd00::").
@@ -165,10 +173,10 @@ spec:
rule: 'size(self) == 2 && isIP(self[0]) && isIP(self[1])
? ip(self[0]).family() != ip(self[1]).family() : true'
machineNetworks:
- description: machineNetworks are IP networks used to connect
- all the OpenShift cluster nodes. Each network is provided
- in the CIDR format and should be IPv4 or IPv6, for example
- "10.0.0.0/8" or "fd00::/8".
+ description: |-
+ machineNetworks are IP networks used to connect all the OpenShift cluster
+ nodes. Each network is provided in the CIDR format and should be IPv4 or IPv6,
+ for example "10.0.0.0/8" or "fd00::/8".
items:
description: CIDR is an IP address range in CIDR notation
(for example, "10.0.0.0/8" or "fd00::/8").
@@ -194,17 +202,15 @@ spec:
Metal infrastructure provider.
type: object
external:
- description: ExternalPlatformType represents generic infrastructure
- provider. Platform-specific components should be supplemented
- separately.
+ description: |-
+ ExternalPlatformType represents generic infrastructure provider.
+ Platform-specific components should be supplemented separately.
properties:
platformName:
default: Unknown
- description: PlatformName holds the arbitrary string representing
- the infrastructure provider name, expected to be set at
- the installation time. This field is solely for informational
- and reporting purposes and is not expected to be used for
- decision-making.
+ description: |-
+ PlatformName holds the arbitrary string representing the infrastructure provider name, expected to be set at the installation time.
+ This field is solely for informational and reporting purposes and is not expected to be used for decision-making.
type: string
x-kubernetes-validations:
- message: platform name cannot be changed once set
@@ -227,20 +233,19 @@ spec:
infrastructure provider.
properties:
failureDomains:
- description: failureDomains configures failure domains information
- for the Nutanix platform. When set, the failure domains
- defined here may be used to spread Machines across prism
- element clusters to improve fault tolerance of the cluster.
+ description: |-
+ failureDomains configures failure domains information for the Nutanix platform.
+ When set, the failure domains defined here may be used to spread Machines across
+ prism element clusters to improve fault tolerance of the cluster.
items:
description: NutanixFailureDomain configures failure domain
information for the Nutanix platform.
properties:
cluster:
- description: cluster is to identify the cluster (the
- Prism Element under management of the Prism Central),
- in which the Machine's VM will be created. The cluster
- identifier (uuid or name) can be obtained from the
- Prism Central console or using the prism_central API.
+ description: |-
+ cluster is to identify the cluster (the Prism Element under management of the Prism Central),
+ in which the Machine's VM will be created. The cluster identifier (uuid or name) can be obtained
+ from the Prism Central console or using the prism_central API.
properties:
name:
description: name is the resource name in the PC.
@@ -270,23 +275,22 @@ spec:
rule: 'has(self.type) && self.type == ''Name'' ? has(self.name)
: !has(self.name)'
name:
- description: name defines the unique name of a failure
- domain. Name is required and must be at most 64 characters
- in length. It must consist of only lower case alphanumeric
- characters and hyphens (-). It must start and end
- with an alphanumeric character. This value is arbitrary
- and is used to identify the failure domain within
- the platform.
+ description: |-
+ name defines the unique name of a failure domain.
+ Name is required and must be at most 64 characters in length.
+ It must consist of only lower case alphanumeric characters and hyphens (-).
+ It must start and end with an alphanumeric character.
+ This value is arbitrary and is used to identify the failure domain within the platform.
maxLength: 64
minLength: 1
pattern: '[a-z0-9]([-a-z0-9]*[a-z0-9])?'
type: string
subnets:
- description: subnets holds a list of identifiers (one
- or more) of the cluster's network subnets for the
- Machine's VM to connect to. The subnet identifiers
- (uuid or name) can be obtained from the Prism Central
- console or using the prism_central API.
+ description: |-
+ subnets holds a list of identifiers (one or more) of the cluster's network subnets
+ If the feature gate NutanixMultiSubnets is enabled, up to 32 subnets may be configured.
+ for the Machine's VM to connect to. The subnet identifiers (uuid or name) can be
+ obtained from the Prism Central console or using the prism_central API.
items:
description: NutanixResourceIdentifier holds the identity
of a Nutanix PC resource (cluster, image, subnet,
@@ -323,9 +327,7 @@ spec:
maxItems: 1
minItems: 1
type: array
- x-kubernetes-list-map-keys:
- - type
- x-kubernetes-list-type: map
+ x-kubernetes-list-type: atomic
required:
- cluster
- name
@@ -336,11 +338,10 @@ spec:
- name
x-kubernetes-list-type: map
prismCentral:
- description: prismCentral holds the endpoint address and port
- to access the Nutanix Prism Central. When a cluster-wide
- proxy is installed, by default, this endpoint will be accessed
- via the proxy. Should you wish for communication with this
- endpoint not to be proxied, please add the endpoint to the
+ description: |-
+ prismCentral holds the endpoint address and port to access the Nutanix Prism Central.
+ When a cluster-wide proxy is installed, by default, this endpoint will be accessed via the proxy.
+ Should you wish for communication with this endpoint not to be proxied, please add the endpoint to the
proxy spec.noProxy list.
properties:
address:
@@ -361,25 +362,22 @@ spec:
- port
type: object
prismElements:
- description: prismElements holds one or more endpoint address
- and port data to access the Nutanix Prism Elements (clusters)
- of the Nutanix Prism Central. Currently we only support
- one Prism Element (cluster) for an OpenShift cluster, where
- all the Nutanix resources (VMs, subnets, volumes, etc.)
- used in the OpenShift cluster are located. In the future,
- we may support Nutanix resources (VMs, etc.) spread over
- multiple Prism Elements (clusters) of the Prism Central.
+ description: |-
+ prismElements holds one or more endpoint address and port data to access the Nutanix
+ Prism Elements (clusters) of the Nutanix Prism Central. Currently we only support one
+ Prism Element (cluster) for an OpenShift cluster, where all the Nutanix resources (VMs, subnets, volumes, etc.)
+ used in the OpenShift cluster are located. In the future, we may support Nutanix resources (VMs, etc.)
+ spread over multiple Prism Elements (clusters) of the Prism Central.
items:
description: NutanixPrismElementEndpoint holds the name
and endpoint data for a Prism Element (cluster)
properties:
endpoint:
- description: endpoint holds the endpoint address and
- port data of the Prism Element (cluster). When a cluster-wide
- proxy is installed, by default, this endpoint will
- be accessed via the proxy. Should you wish for communication
- with this endpoint not to be proxied, please add the
- endpoint to the proxy spec.noProxy list.
+ description: |-
+ endpoint holds the endpoint address and port data of the Prism Element (cluster).
+ When a cluster-wide proxy is installed, by default, this endpoint will be accessed via the proxy.
+ Should you wish for communication with this endpoint not to be proxied, please add the endpoint to the
+ proxy spec.noProxy list.
properties:
address:
description: address is the endpoint address (DNS
@@ -399,10 +397,9 @@ spec:
- port
type: object
name:
- description: name is the name of the Prism Element (cluster).
- This value will correspond with the cluster field
- configured on other resources (eg Machines, PVCs,
- etc).
+ description: |-
+ name is the name of the Prism Element (cluster). This value will correspond with
+ the cluster field configured on other resources (eg Machines, PVCs, etc).
maxLength: 256
type: string
required:
@@ -422,17 +419,16 @@ spec:
infrastructure provider.
properties:
apiServerInternalIPs:
- description: apiServerInternalIPs are the IP addresses to
- contact the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. These are the IPs for
- a self-hosted load balancer in front of the API servers.
- In dual stack clusters this list contains two IP addresses,
- one from IPv4 family and one from IPv6. In single stack
- clusters a single IP address is expected. When omitted,
- values from the status.apiServerInternalIPs will be used.
- Once set, the list cannot be completely removed (but its
- second entry can).
+ description: |-
+ apiServerInternalIPs are the IP addresses to contact the Kubernetes API
+ server that can be used by components inside the cluster, like kubelets
+ using the infrastructure rather than Kubernetes networking. These are the
+ IPs for a self-hosted load balancer in front of the API servers.
+ In dual stack clusters this list contains two IP addresses, one from IPv4
+ family and one from IPv6.
+ In single stack clusters a single IP address is expected.
+ When omitted, values from the status.apiServerInternalIPs will be used.
+ Once set, the list cannot be completely removed (but its second entry can).
items:
description: IP is an IP address (for example, "10.0.0.0"
or "fd00::").
@@ -451,15 +447,15 @@ spec:
rule: 'size(self) == 2 && isIP(self[0]) && isIP(self[1])
? ip(self[0]).family() != ip(self[1]).family() : true'
ingressIPs:
- description: ingressIPs are the external IPs which route to
- the default ingress controller. The IPs are suitable targets
- of a wildcard DNS record used to resolve default route host
- names. In dual stack clusters this list contains two IP
- addresses, one from IPv4 family and one from IPv6. In single
- stack clusters a single IP address is expected. When omitted,
- values from the status.ingressIPs will be used. Once set,
- the list cannot be completely removed (but its second entry
- can).
+ description: |-
+ ingressIPs are the external IPs which route to the default ingress
+ controller. The IPs are suitable targets of a wildcard DNS record used to
+ resolve default route host names.
+ In dual stack clusters this list contains two IP addresses, one from IPv4
+ family and one from IPv6.
+ In single stack clusters a single IP address is expected.
+ When omitted, values from the status.ingressIPs will be used.
+ Once set, the list cannot be completely removed (but its second entry can).
items:
description: IP is an IP address (for example, "10.0.0.0"
or "fd00::").
@@ -478,10 +474,10 @@ spec:
rule: 'size(self) == 2 && isIP(self[0]) && isIP(self[1])
? ip(self[0]).family() != ip(self[1]).family() : true'
machineNetworks:
- description: machineNetworks are IP networks used to connect
- all the OpenShift cluster nodes. Each network is provided
- in the CIDR format and should be IPv4 or IPv6, for example
- "10.0.0.0/8" or "fd00::/8".
+ description: |-
+ machineNetworks are IP networks used to connect all the OpenShift cluster
+ nodes. Each network is provided in the CIDR format and should be IPv4 or IPv6,
+ for example "10.0.0.0/8" or "fd00::/8".
items:
description: CIDR is an IP address range in CIDR notation
(for example, "10.0.0.0/8" or "fd00::/8").
@@ -511,26 +507,42 @@ spec:
Systems Virtual Servers infrastructure provider.
properties:
serviceEndpoints:
- description: serviceEndpoints is a list of custom endpoints
- which will override the default service endpoints of a Power
- VS service.
+ description: |-
+ serviceEndpoints is a list of custom endpoints which will override the default
+ service endpoints of a Power VS service.
items:
- description: PowervsServiceEndpoint stores the configuration
- of a custom url to override existing defaults of PowerVS
- Services.
+ description: |-
+ PowervsServiceEndpoint stores the configuration of a custom url to
+ override existing defaults of PowerVS Services.
properties:
name:
- description: name is the name of the Power VS service.
- Few of the services are IAM - https://cloud.ibm.com/apidocs/iam-identity-token-api
+ description: |-
+ name is the name of the Power VS service.
+ Few of the services are
+ IAM - https://cloud.ibm.com/apidocs/iam-identity-token-api
ResourceController - https://cloud.ibm.com/apidocs/resource-controller/resource-controller
Power Cloud - https://cloud.ibm.com/apidocs/power-cloud
- pattern: ^[a-z0-9-]+$
+ enum:
+ - CIS
+ - COS
+ - COSConfig
+ - DNSServices
+ - GlobalCatalog
+ - GlobalSearch
+ - GlobalTagging
+ - HyperProtect
+ - IAM
+ - KeyProtect
+ - Power
+ - ResourceController
+ - ResourceManager
+ - VPC
type: string
url:
- description: url is fully qualified URI with scheme
- https, that overrides the default generated endpoint
- for a client. This must be provided and cannot be
- empty.
+ description: |-
+ url is fully qualified URI with scheme https, that overrides the default generated
+ endpoint for a client.
+ This must be provided and cannot be empty.
format: uri
pattern: ^https://
type: string
@@ -544,16 +556,15 @@ spec:
x-kubernetes-list-type: map
type: object
type:
- description: type is the underlying infrastructure provider for
- the cluster. This value controls whether infrastructure automation
- such as service load balancers, dynamic volume provisioning,
- machine creation and deletion, and other integrations are enabled.
- If None, no infrastructure automation is enabled. Allowed values
- are "AWS", "Azure", "BareMetal", "GCP", "Libvirt", "OpenStack",
- "VSphere", "oVirt", "KubeVirt", "EquinixMetal", "PowerVS", "AlibabaCloud",
- "Nutanix" and "None". Individual components may not support
- all platforms, and must handle unrecognized platforms as None
- if they do not support that platform.
+ description: |-
+ type is the underlying infrastructure provider for the cluster. This
+ value controls whether infrastructure automation such as service load
+ balancers, dynamic volume provisioning, machine creation and deletion, and
+ other integrations are enabled. If None, no infrastructure automation is
+ enabled. Allowed values are "AWS", "Azure", "BareMetal", "GCP", "Libvirt",
+ "OpenStack", "VSphere", "oVirt", "KubeVirt", "EquinixMetal", "PowerVS",
+ "AlibabaCloud", "Nutanix" and "None". Individual components may not support all platforms,
+ and must handle unrecognized platforms as None if they do not support that platform.
enum:
- ""
- AWS
@@ -578,17 +589,16 @@ spec:
infrastructure provider.
properties:
apiServerInternalIPs:
- description: apiServerInternalIPs are the IP addresses to
- contact the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. These are the IPs for
- a self-hosted load balancer in front of the API servers.
- In dual stack clusters this list contains two IP addresses,
- one from IPv4 family and one from IPv6. In single stack
- clusters a single IP address is expected. When omitted,
- values from the status.apiServerInternalIPs will be used.
- Once set, the list cannot be completely removed (but its
- second entry can).
+ description: |-
+ apiServerInternalIPs are the IP addresses to contact the Kubernetes API
+ server that can be used by components inside the cluster, like kubelets
+ using the infrastructure rather than Kubernetes networking. These are the
+ IPs for a self-hosted load balancer in front of the API servers.
+ In dual stack clusters this list contains two IP addresses, one from IPv4
+ family and one from IPv6.
+ In single stack clusters a single IP address is expected.
+ When omitted, values from the status.apiServerInternalIPs will be used.
+ Once set, the list cannot be completely removed (but its second entry can).
items:
description: IP is an IP address (for example, "10.0.0.0"
or "fd00::").
@@ -607,24 +617,26 @@ spec:
rule: 'size(self) == 2 && isIP(self[0]) && isIP(self[1])
? ip(self[0]).family() != ip(self[1]).family() : true'
failureDomains:
- description: failureDomains contains the definition of region,
- zone and the vCenter topology. If this is omitted failure
- domains (regions and zones) will not be used.
+ description: |-
+ failureDomains contains the definition of region, zone and the vCenter topology.
+ If this is omitted failure domains (regions and zones) will not be used.
items:
- description: VSpherePlatformFailureDomainSpec holds the
- region and zone failure domain and the vCenter topology
- of that failure domain.
+ description: |-
+ VSpherePlatformFailureDomainSpec holds the region and zone failure domain and
+ the vCenter topology of that failure domain.
properties:
name:
- description: name defines the arbitrary but unique name
+ description: |-
+ name defines the arbitrary but unique name
of a failure domain.
maxLength: 256
minLength: 1
type: string
region:
- description: region defines the name of a region tag
- that will be attached to a vCenter datacenter. The
- tag category in vCenter must be named openshift-region.
+ description: |-
+ region defines the name of a region tag that will
+ be attached to a vCenter datacenter. The tag
+ category in vCenter must be named openshift-region.
maxLength: 80
minLength: 1
type: string
@@ -634,7 +646,7 @@ spec:
- format: ipv6
- format: hostname
description: server is the fully-qualified domain name
- or the IP address of the vCenter server. ---
+ or the IP address of the vCenter server.
maxLength: 255
minLength: 1
type: string
@@ -643,45 +655,48 @@ spec:
using vSphere constructs
properties:
computeCluster:
- description: computeCluster the absolute path of
- the vCenter cluster in which virtual machine will
- be located. The absolute path is of the form /<datacenter>/host/<cluster>.
+ description: |-
+ computeCluster the absolute path of the vCenter cluster
+ in which virtual machine will be located.
+ The absolute path is of the form /<datacenter>/host/<cluster>.
The maximum length of the path is 2048 characters.
maxLength: 2048
pattern: ^/.*?/host/.*?
type: string
datacenter:
- description: datacenter is the name of vCenter datacenter
- in which virtual machines will be located. The
- maximum length of the datacenter name is 80 characters.
+ description: |-
+ datacenter is the name of vCenter datacenter in which virtual machines will be located.
+ The maximum length of the datacenter name is 80 characters.
maxLength: 80
type: string
datastore:
- description: datastore is the absolute path of the
- datastore in which the virtual machine is located.
+ description: |-
+ datastore is the absolute path of the datastore in which the
+ virtual machine is located.
The absolute path is of the form /<datacenter>/datastore/<datastore>
The maximum length of the path is 2048 characters.
maxLength: 2048
pattern: ^/.*?/datastore/.*?
type: string
folder:
- description: folder is the absolute path of the
- folder where virtual machines are located. The
- absolute path is of the form /<datacenter>/vm/<folder>.
+ description: |-
+ folder is the absolute path of the folder where
+ virtual machines are located. The absolute path
+ is of the form /<datacenter>/vm/<folder>.
The maximum length of the path is 2048 characters.
maxLength: 2048
pattern: ^/.*?/vm/.*?
type: string
networks:
- description: 'networks is the list of port group
- network names within this failure domain. If feature
- gate VSphereMultiNetworks is enabled, up to 10
- network adapters may be defined. 10 is the maximum
- number of virtual network devices which may be
- attached to a VM as defined by: https://configmax.esp.vmware.com/guest?vmwareproduct=vSphere&release=vSphere%208.0&categories=1-0
- The available networks (port groups) can be listed
- using `govc ls ''network/*''` Networks should
- be in the form of an absolute path: /<datacenter>/network/<portgroup>.'
+ description: |-
+ networks is the list of port group network names within this failure domain.
+ If feature gate VSphereMultiNetworks is enabled, up to 10 network adapters may be defined.
+ 10 is the maximum number of virtual network devices which may be attached to a VM as defined by:
+ https://configmax.esp.vmware.com/guest?vmwareproduct=vSphere&release=vSphere%208.0&categories=1-0
+ The available networks (port groups) can be listed using
+ `govc ls 'network/*'`
+ Networks should be in the form of an absolute path:
+ /<datacenter>/network/<portgroup>.
items:
type: string
maxItems: 1
@@ -689,25 +704,24 @@ spec:
type: array
x-kubernetes-list-type: atomic
resourcePool:
- description: resourcePool is the absolute path of
- the resource pool where virtual machines will
- be created. The absolute path is of the form /<datacenter>/host/<cluster>/Resources/<resourcepool>.
+ description: |-
+ resourcePool is the absolute path of the resource pool where virtual machines will be
+ created. The absolute path is of the form /<datacenter>/host/<cluster>/Resources/<resourcepool>.
The maximum length of the path is 2048 characters.
maxLength: 2048
pattern: ^/.*?/host/.*?/Resources.*
type: string
template:
- description: "template is the full inventory path
- of the virtual machine or template that will be
- cloned when creating new machines in this failure
- domain. The maximum length of the path is 2048
- characters. \n When omitted, the template will
- be calculated by the control plane machineset
- operator based on the region and zone defined
- in VSpherePlatformFailureDomainSpec. For example,
- for zone=zonea, region=region1, and infrastructure
- name=test, the template path would be calculated
- as /<datacenter>/vm/test-rhcos-region1-zonea."
+ description: |-
+ template is the full inventory path of the virtual machine or template
+ that will be cloned when creating new machines in this failure domain.
+ The maximum length of the path is 2048 characters.
+
+ When omitted, the template will be calculated by the control plane
+ machineset operator based on the region and zone defined in
+ VSpherePlatformFailureDomainSpec.
+ For example, for zone=zonea, region=region1, and infrastructure name=test,
+ the template path would be calculated as /<datacenter>/vm/test-rhcos-region1-zonea.
maxLength: 2048
minLength: 1
pattern: ^/.*?/vm/.*?
@@ -719,9 +733,10 @@ spec:
- networks
type: object
zone:
- description: zone defines the name of a zone tag that
- will be attached to a vCenter cluster. The tag category
- in vCenter must be named openshift-zone.
+ description: |-
+ zone defines the name of a zone tag that will
+ be attached to a vCenter cluster. The tag
+ category in vCenter must be named openshift-zone.
maxLength: 80
minLength: 1
type: string
@@ -737,15 +752,15 @@ spec:
- name
x-kubernetes-list-type: map
ingressIPs:
- description: ingressIPs are the external IPs which route to
- the default ingress controller. The IPs are suitable targets
- of a wildcard DNS record used to resolve default route host
- names. In dual stack clusters this list contains two IP
- addresses, one from IPv4 family and one from IPv6. In single
- stack clusters a single IP address is expected. When omitted,
- values from the status.ingressIPs will be used. Once set,
- the list cannot be completely removed (but its second entry
- can).
+ description: |-
+ ingressIPs are the external IPs which route to the default ingress
+ controller. The IPs are suitable targets of a wildcard DNS record used to
+ resolve default route host names.
+ In dual stack clusters this list contains two IP addresses, one from IPv4
+ family and one from IPv6.
+ In single stack clusters a single IP address is expected.
+ When omitted, values from the status.ingressIPs will be used.
+ Once set, the list cannot be completely removed (but its second entry can).
items:
description: IP is an IP address (for example, "10.0.0.0"
or "fd00::").
@@ -764,10 +779,10 @@ spec:
rule: 'size(self) == 2 && isIP(self[0]) && isIP(self[1])
? ip(self[0]).family() != ip(self[1]).family() : true'
machineNetworks:
- description: machineNetworks are IP networks used to connect
- all the OpenShift cluster nodes. Each network is provided
- in the CIDR format and should be IPv4 or IPv6, for example
- "10.0.0.0/8" or "fd00::/8".
+ description: |-
+ machineNetworks are IP networks used to connect all the OpenShift cluster
+ nodes. Each network is provided in the CIDR format and should be IPv4 or IPv6,
+ for example "10.0.0.0/8" or "fd00::/8".
items:
description: CIDR is an IP address range in CIDR notation
(for example, "10.0.0.0/8" or "fd00::/8").
@@ -783,41 +798,39 @@ spec:
x-kubernetes-validations:
- rule: self.all(x, self.exists_one(y, x == y))
nodeNetworking:
- description: nodeNetworking contains the definition of internal
- and external network constraints for assigning the node's
- networking. If this field is omitted, networking defaults
- to the legacy address selection behavior which is to only
- support a single address and return the first one found.
+ description: |-
+ nodeNetworking contains the definition of internal and external network constraints for
+ assigning the node's networking.
+ If this field is omitted, networking defaults to the legacy
+ address selection behavior which is to only support a single address and
+ return the first one found.
properties:
external:
description: external represents the network configuration
of the node that is externally routable.
properties:
excludeNetworkSubnetCidr:
- description: excludeNetworkSubnetCidr IP addresses
- in subnet ranges will be excluded when selecting
- the IP address from the VirtualMachine's VM for
- use in the status.addresses fields. ---
+ description: |-
+ excludeNetworkSubnetCidr IP addresses in subnet ranges will be excluded when selecting
+ the IP address from the VirtualMachine's VM for use in the status.addresses fields.
items:
format: cidr
type: string
type: array
x-kubernetes-list-type: atomic
network:
- description: network VirtualMachine's VM Network names
- that will be used to when searching for status.addresses
- fields. Note that if internal.networkSubnetCIDR
- and external.networkSubnetCIDR are not set, then
- the vNIC associated to this network must only have
- a single IP address assigned to it. The available
- networks (port groups) can be listed using `govc
- ls 'network/*'`
+ description: |-
+ network VirtualMachine's VM Network names that will be used to when searching
+ for status.addresses fields. Note that if internal.networkSubnetCIDR and
+ external.networkSubnetCIDR are not set, then the vNIC associated to this network must
+ only have a single IP address assigned to it.
+ The available networks (port groups) can be listed using
+ `govc ls 'network/*'`
type: string
networkSubnetCidr:
- description: networkSubnetCidr IP address on VirtualMachine's
- network interfaces included in the fields' CIDRs
- that will be used in respective status.addresses
- fields. ---
+ description: |-
+ networkSubnetCidr IP address on VirtualMachine's network interfaces included in the fields' CIDRs
+ that will be used in respective status.addresses fields.
items:
format: cidr
type: string
@@ -829,30 +842,27 @@ spec:
of the node that is routable only within the cluster.
properties:
excludeNetworkSubnetCidr:
- description: excludeNetworkSubnetCidr IP addresses
- in subnet ranges will be excluded when selecting
- the IP address from the VirtualMachine's VM for
- use in the status.addresses fields. ---
+ description: |-
+ excludeNetworkSubnetCidr IP addresses in subnet ranges will be excluded when selecting
+ the IP address from the VirtualMachine's VM for use in the status.addresses fields.
items:
format: cidr
type: string
type: array
x-kubernetes-list-type: atomic
network:
- description: network VirtualMachine's VM Network names
- that will be used to when searching for status.addresses
- fields. Note that if internal.networkSubnetCIDR
- and external.networkSubnetCIDR are not set, then
- the vNIC associated to this network must only have
- a single IP address assigned to it. The available
- networks (port groups) can be listed using `govc
- ls 'network/*'`
+ description: |-
+ network VirtualMachine's VM Network names that will be used to when searching
+ for status.addresses fields. Note that if internal.networkSubnetCIDR and
+ external.networkSubnetCIDR are not set, then the vNIC associated to this network must
+ only have a single IP address assigned to it.
+ The available networks (port groups) can be listed using
+ `govc ls 'network/*'`
type: string
networkSubnetCidr:
- description: networkSubnetCidr IP address on VirtualMachine's
- network interfaces included in the fields' CIDRs
- that will be used in respective status.addresses
- fields. ---
+ description: |-
+ networkSubnetCidr IP address on VirtualMachine's network interfaces included in the fields' CIDRs
+ that will be used in respective status.addresses fields.
items:
format: cidr
type: string
@@ -861,36 +871,38 @@ spec:
type: object
type: object
vcenters:
- description: vcenters holds the connection details for services
- to communicate with vCenter. Currently, only a single vCenter
- is supported, but in tech preview 3 vCenters are supported.
- Once the cluster has been installed, you are unable to change
- the current number of defined vCenters except in the case
- where the cluster has been upgraded from a version of OpenShift
- where the vsphere platform spec was not present. You may
- make modifications to the existing vCenters that are defined
- in the vcenters list in order to match with any added or
- modified failure domains. ---
+ description: |-
+ vcenters holds the connection details for services to communicate with vCenter.
+ Currently, only a single vCenter is supported, but in tech preview 3 vCenters are supported.
+ Once the cluster has been installed, you are unable to change the current number of defined
+ vCenters except in the case where the cluster has been upgraded from a version of OpenShift
+ where the vsphere platform spec was not present. You may make modifications to the existing
+ vCenters that are defined in the vcenters list in order to match with any added or modified
+ failure domains.
items:
- description: VSpherePlatformVCenterSpec stores the vCenter
- connection fields. This is used by the vSphere CCM.
+ description: |-
+ VSpherePlatformVCenterSpec stores the vCenter connection fields.
+ This is used by the vSphere CCM.
properties:
datacenters:
- description: The vCenter Datacenters in which the RHCOS
- vm guests are located. This field will be used by
- the Cloud Controller Manager. Each datacenter listed
- here should be used within a topology.
+ description: |-
+ The vCenter Datacenters in which the RHCOS
+ vm guests are located. This field will
+ be used by the Cloud Controller Manager.
+ Each datacenter listed here should be used within
+ a topology.
items:
type: string
minItems: 1
type: array
x-kubernetes-list-type: set
port:
- description: port is the TCP port that will be used
- to communicate to the vCenter endpoint. When omitted,
- this means the user has no opinion and it is up to
- the platform to choose a sensible default, which is
- subject to change over time.
+ description: |-
+ port is the TCP port that will be used to communicate to
+ the vCenter endpoint.
+ When omitted, this means the user has no opinion and
+ it is up to the platform to choose a sensible default,
+ which is subject to change over time.
format: int32
maximum: 32767
minimum: 1
@@ -901,7 +913,7 @@ spec:
- format: ipv6
- format: hostname
description: server is the fully-qualified domain name
- or the IP address of the vCenter server. ---
+ or the IP address of the vCenter server.
maxLength: 255
type: string
required:
@@ -936,28 +948,27 @@ spec:
be overridden.
properties:
apiServerInternalURI:
- description: apiServerInternalURL is a valid URI with scheme 'https',
- address and optionally a port (defaulting to 443). apiServerInternalURL
- can be used by components like kubelets, to contact the Kubernetes
- API server using the infrastructure provider rather than Kubernetes
- networking.
+ description: |-
+ apiServerInternalURL is a valid URI with scheme 'https',
+ address and optionally a port (defaulting to 443). apiServerInternalURL can be used by components
+ like kubelets, to contact the Kubernetes API server using the
+ infrastructure provider rather than Kubernetes networking.
type: string
apiServerURL:
- description: apiServerURL is a valid URI with scheme 'https', address
- and optionally a port (defaulting to 443). apiServerURL can be
- used by components like the web console to tell users where to find
- the Kubernetes API.
+ description: |-
+ apiServerURL is a valid URI with scheme 'https', address and
+ optionally a port (defaulting to 443). apiServerURL can be used by components like the web console
+ to tell users where to find the Kubernetes API.
type: string
controlPlaneTopology:
default: HighlyAvailable
- description: controlPlaneTopology expresses the expectations for operands
- that normally run on control nodes. The default is 'HighlyAvailable',
- which represents the behavior operators have in a "normal" cluster.
+ description: |-
+ controlPlaneTopology expresses the expectations for operands that normally run on control nodes.
+ The default is 'HighlyAvailable', which represents the behavior operators have in a "normal" cluster.
The 'SingleReplica' mode will be used in single-node deployments
- and the operators should not configure the operand for highly-available
- operation The 'External' mode indicates that the control plane is
- hosted externally to the cluster and that its components are not
- visible within the cluster.
+ and the operators should not configure the operand for highly-available operation
+ The 'External' mode indicates that the control plane is hosted externally to the cluster and that
+ its components are not visible within the cluster.
enum:
- HighlyAvailable
- SingleReplica
@@ -965,47 +976,49 @@ spec:
type: string
cpuPartitioning:
default: None
- description: cpuPartitioning expresses if CPU partitioning is a currently
- enabled feature in the cluster. CPU Partitioning means that this
- cluster can support partitioning workloads to specific CPU Sets.
- Valid values are "None" and "AllNodes". When omitted, the default
- value is "None". The default value of "None" indicates that no nodes
- will be setup with CPU partitioning. The "AllNodes" value indicates
- that all nodes have been setup with CPU partitioning, and can then
- be further configured via the PerformanceProfile API.
+ description: |-
+ cpuPartitioning expresses if CPU partitioning is a currently enabled feature in the cluster.
+ CPU Partitioning means that this cluster can support partitioning workloads to specific CPU Sets.
+ Valid values are "None" and "AllNodes". When omitted, the default value is "None".
+ The default value of "None" indicates that no nodes will be setup with CPU partitioning.
+ The "AllNodes" value indicates that all nodes have been setup with CPU partitioning,
+ and can then be further configured via the PerformanceProfile API.
enum:
- None
- AllNodes
type: string
etcdDiscoveryDomain:
- description: 'etcdDiscoveryDomain is the domain used to fetch the
- SRV records for discovering etcd servers and clients. For more info:
- https://github.com/etcd-io/etcd/blob/329be66e8b3f9e2e6af83c123ff89297e49ebd15/Documentation/op-guide/clustering.md#dns-discovery
- deprecated: as of 4.7, this field is no longer set or honored. It
- will be removed in a future release.'
+ description: |-
+ etcdDiscoveryDomain is the domain used to fetch the SRV records for discovering
+ etcd servers and clients.
+ For more info: https://github.com/etcd-io/etcd/blob/329be66e8b3f9e2e6af83c123ff89297e49ebd15/Documentation/op-guide/clustering.md#dns-discovery
+ deprecated: as of 4.7, this field is no longer set or honored. It will be removed in a future release.
type: string
infrastructureName:
- description: infrastructureName uniquely identifies a cluster with
- a human friendly name. Once set it should not be changed. Must be
- of max length 27 and must have only alphanumeric or hyphen characters.
+ description: |-
+ infrastructureName uniquely identifies a cluster with a human friendly name.
+ Once set it should not be changed. Must be of max length 27 and must have only
+ alphanumeric or hyphen characters.
type: string
infrastructureTopology:
default: HighlyAvailable
- description: 'infrastructureTopology expresses the expectations for
- infrastructure services that do not run on control plane nodes,
- usually indicated by a node selector for a `role` value other than
- `master`. The default is ''HighlyAvailable'', which represents the
- behavior operators have in a "normal" cluster. The ''SingleReplica''
- mode will be used in single-node deployments and the operators should
- not configure the operand for highly-available operation NOTE: External
- topology mode is not applicable for this field.'
+ description: |-
+ infrastructureTopology expresses the expectations for infrastructure services that do not run on control
+ plane nodes, usually indicated by a node selector for a `role` value
+ other than `master`.
+ The default is 'HighlyAvailable', which represents the behavior operators have in a "normal" cluster.
+ The 'SingleReplica' mode will be used in single-node deployments
+ and the operators should not configure the operand for highly-available operation
+ NOTE: External topology mode is not applicable for this field.
enum:
- HighlyAvailable
- SingleReplica
type: string
platform:
- description: "platform is the underlying infrastructure provider for
- the cluster. \n Deprecated: Use platformStatus.type instead."
+ description: |-
+ platform is the underlying infrastructure provider for the cluster.
+
+ Deprecated: Use platformStatus.type instead.
enum:
- ""
- AWS
@@ -1026,8 +1039,9 @@ spec:
- External
type: string
platformStatus:
- description: platformStatus holds status information specific to the
- underlying infrastructure provider.
+ description: |-
+ platformStatus holds status information specific to the underlying
+ infrastructure provider.
properties:
alibabaCloud:
description: AlibabaCloud contains settings specific to the Alibaba
@@ -1081,11 +1095,11 @@ spec:
resources created by the cluster.
type: string
resourceTags:
- description: resourceTags is a list of additional tags to
- apply to AWS resources created for the cluster. See https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html
- for information on tagging AWS resources. AWS supports a
- maximum of 50 tags per resource. OpenShift reserves 25 tags
- for its use, leaving 25 tags available for the user.
+ description: |-
+ resourceTags is a list of additional tags to apply to AWS resources created for the cluster.
+ See https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html for information on tagging AWS resources.
+ AWS supports a maximum of 50 tags per resource. OpenShift reserves 25 tags for its use, leaving 25 tags
+ available for the user.
items:
description: AWSResourceTag is a tag to apply to AWS resources
created for the cluster.
@@ -1097,10 +1111,10 @@ spec:
pattern: ^[0-9A-Za-z_.:/=+-@]+$
type: string
value:
- description: value is the value of the tag. Some AWS
- service do not support empty values. Since tags are
- added to resources in many services, the length of
- the tag value must meet the requirements of all services.
+ description: |-
+ value is the value of the tag.
+ Some AWS service do not support empty values. Since tags are added to resources in many services, the
+ length of the tag value must meet the requirements of all services.
maxLength: 256
minLength: 1
pattern: ^[0-9A-Za-z_.:/=+-@]+$
@@ -1113,24 +1127,27 @@ spec:
type: array
x-kubernetes-list-type: atomic
serviceEndpoints:
- description: ServiceEndpoints list contains custom endpoints
- which will override default service endpoint of AWS Services.
+ description: |-
+ ServiceEndpoints list contains custom endpoints which will override default
+ service endpoint of AWS Services.
There must be only one ServiceEndpoint for a service.
items:
- description: AWSServiceEndpoint store the configuration
- of a custom url to override existing defaults of AWS Services.
+ description: |-
+ AWSServiceEndpoint store the configuration of a custom url to
+ override existing defaults of AWS Services.
properties:
name:
- description: name is the name of the AWS service. The
- list of all the service names can be found at https://docs.aws.amazon.com/general/latest/gr/aws-service-information.html
+ description: |-
+ name is the name of the AWS service.
+ The list of all the service names can be found at https://docs.aws.amazon.com/general/latest/gr/aws-service-information.html
This must be provided and cannot be empty.
pattern: ^[a-z0-9-]+$
type: string
url:
- description: url is fully qualified URI with scheme
- https, that overrides the default generated endpoint
- for a client. This must be provided and cannot be
- empty.
+ description: |-
+ url is fully qualified URI with scheme https, that overrides the default generated
+ endpoint for a client.
+ This must be provided and cannot be empty.
pattern: ^https://
type: string
type: object
@@ -1146,9 +1163,10 @@ spec:
management in non-soverign clouds such as Azure Stack.
type: string
cloudName:
- description: cloudName is the name of the Azure cloud environment
- which can be used to configure the Azure SDK with the appropriate
- Azure API endpoints. If empty, the value is equal to `AzurePublicCloud`.
+ description: |-
+ cloudName is the name of the Azure cloud environment which can be used to configure the Azure SDK
+ with the appropriate Azure API endpoints.
+ If empty, the value is equal to `AzurePublicCloud`.
enum:
- ""
- AzurePublicCloud
@@ -1158,42 +1176,37 @@ spec:
- AzureStackCloud
type: string
networkResourceGroupName:
- description: networkResourceGroupName is the Resource Group
- for network resources like the Virtual Network and Subnets
- used by the cluster. If empty, the value is same as ResourceGroupName.
+ description: |-
+ networkResourceGroupName is the Resource Group for network resources like the Virtual Network and Subnets used by the cluster.
+ If empty, the value is same as ResourceGroupName.
type: string
resourceGroupName:
description: resourceGroupName is the Resource Group for new
Azure resources created for the cluster.
type: string
resourceTags:
- description: resourceTags is a list of additional tags to
- apply to Azure resources created for the cluster. See https://docs.microsoft.com/en-us/rest/api/resources/tags
- for information on tagging Azure resources. Due to limitations
- on Automation, Content Delivery Network, DNS Azure resources,
- a maximum of 15 tags may be applied. OpenShift reserves
- 5 tags for internal use, allowing 10 tags for user configuration.
+ description: |-
+ resourceTags is a list of additional tags to apply to Azure resources created for the cluster.
+ See https://docs.microsoft.com/en-us/rest/api/resources/tags for information on tagging Azure resources.
+ Due to limitations on Automation, Content Delivery Network, DNS Azure resources, a maximum of 15 tags
+ may be applied. OpenShift reserves 5 tags for internal use, allowing 10 tags for user configuration.
items:
description: AzureResourceTag is a tag to apply to Azure
resources created for the cluster.
properties:
key:
- description: key is the key part of the tag. A tag key
- can have a maximum of 128 characters and cannot be
- empty. Key must begin with a letter, end with a letter,
- number or underscore, and must contain only alphanumeric
- characters and the following special characters `_
- . -`.
+ description: |-
+ key is the key part of the tag. A tag key can have a maximum of 128 characters and cannot be empty. Key
+ must begin with a letter, end with a letter, number or underscore, and must contain only alphanumeric
+ characters and the following special characters `_ . -`.
maxLength: 128
minLength: 1
pattern: ^[a-zA-Z]([0-9A-Za-z_.-]*[0-9A-Za-z_])?$
type: string
value:
- description: 'value is the value part of the tag. A
- tag value can have a maximum of 256 characters and
- cannot be empty. Value must contain only alphanumeric
- characters and the following special characters `_
- + , - . / : ; < = > ? @`.'
+ description: |-
+ value is the value part of the tag. A tag value can have a maximum of 256 characters and cannot be empty. Value
+ must contain only alphanumeric characters and the following special characters `_ + , - . / : ; < = > ? @`.
maxLength: 256
minLength: 1
pattern: ^[0-9A-Za-z_.=+-@]+$
@@ -1219,22 +1232,21 @@ spec:
platform.
properties:
apiServerInternalIP:
- description: "apiServerInternalIP is an IP address to contact
- the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. It is the IP that the
- Infrastructure.status.apiServerInternalURI points to. It
- is the IP for a self-hosted load balancer in front of the
- API servers. \n Deprecated: Use APIServerInternalIPs instead."
+ description: |-
+ apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used
+ by components inside the cluster, like kubelets using the infrastructure rather
+ than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI
+ points to. It is the IP for a self-hosted load balancer in front of the API servers.
+
+ Deprecated: Use APIServerInternalIPs instead.
type: string
apiServerInternalIPs:
- description: apiServerInternalIPs are the IP addresses to
- contact the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. These are the IPs for
- a self-hosted load balancer in front of the API servers.
- In dual stack clusters this list contains two IPs otherwise
- only one.
+ description: |-
+ apiServerInternalIPs are the IP addresses to contact the Kubernetes API
+ server that can be used by components inside the cluster, like kubelets
+ using the infrastructure rather than Kubernetes networking. These are the
+ IPs for a self-hosted load balancer in front of the API servers. In dual
+ stack clusters this list contains two IPs otherwise only one.
format: ip
items:
type: string
@@ -1248,17 +1260,18 @@ spec:
&& isIP(self[1]) ? ip(self[0]).family() != ip(self[1]).family()
: true)'
ingressIP:
- description: "ingressIP is an external IP which routes to
- the default ingress controller. The IP is a suitable target
- of a wildcard DNS record used to resolve default route host
- names. \n Deprecated: Use IngressIPs instead."
+ description: |-
+ ingressIP is an external IP which routes to the default ingress controller.
+ The IP is a suitable target of a wildcard DNS record used to resolve default route host names.
+
+ Deprecated: Use IngressIPs instead.
type: string
ingressIPs:
- description: ingressIPs are the external IPs which route to
- the default ingress controller. The IPs are suitable targets
- of a wildcard DNS record used to resolve default route host
- names. In dual stack clusters this list contains two IPs
- otherwise only one.
+ description: |-
+ ingressIPs are the external IPs which route to the default ingress
+ controller. The IPs are suitable targets of a wildcard DNS record used to
+ resolve default route host names. In dual stack clusters this list
+ contains two IPs otherwise only one.
format: ip
items:
type: string
@@ -1279,18 +1292,16 @@ spec:
properties:
type:
default: OpenShiftManagedDefault
- description: type defines the type of load balancer used
- by the cluster on BareMetal platform which can be a
- user-managed or openshift-managed load balancer that
- is to be used for the OpenShift API and Ingress endpoints.
- When set to OpenShiftManagedDefault the static pods
- in charge of API and Ingress traffic load-balancing
+ description: |-
+ type defines the type of load balancer used by the cluster on BareMetal platform
+ which can be a user-managed or openshift-managed load balancer
+ that is to be used for the OpenShift API and Ingress endpoints.
+ When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing
defined in the machine config operator will be deployed.
- When set to UserManaged these static pods will not be
- deployed and it is expected that the load balancer is
- configured out of band by the deployer. When omitted,
- this means no opinion and the platform is left to choose
- a reasonable default. The default value is OpenShiftManagedDefault.
+ When set to UserManaged these static pods will not be deployed and it is expected that
+ the load balancer is configured out of band by the deployer.
+ When omitted, this means no opinion and the platform is left to choose a reasonable default.
+ The default value is OpenShiftManagedDefault.
enum:
- OpenShiftManagedDefault
- UserManaged
@@ -1317,13 +1328,13 @@ spec:
x-kubernetes-validations:
- rule: self.all(x, self.exists_one(y, x == y))
nodeDNSIP:
- description: nodeDNSIP is the IP address for the internal
- DNS used by the nodes. Unlike the one managed by the DNS
- operator, `NodeDNSIP` provides name resolution for the nodes
- themselves. There is no DNS-as-a-service for BareMetal deployments.
- In order to minimize necessary changes to the datacenter
- DNS, a DNS service is hosted as a static pod to serve those
- hostnames to the nodes in the cluster.
+ description: |-
+ nodeDNSIP is the IP address for the internal DNS used by the
+ nodes. Unlike the one managed by the DNS operator, `NodeDNSIP`
+ provides name resolution for the nodes themselves. There is no DNS-as-a-service for
+ BareMetal deployments. In order to minimize necessary changes to the
+ datacenter DNS, a DNS service is hosted as a static pod to serve those hostnames
+ to the nodes in the cluster.
type: string
type: object
equinixMetal:
@@ -1331,19 +1342,16 @@ spec:
Metal infrastructure provider.
properties:
apiServerInternalIP:
- description: apiServerInternalIP is an IP address to contact
- the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. It is the IP that the
- Infrastructure.status.apiServerInternalURI points to. It
- is the IP for a self-hosted load balancer in front of the
- API servers.
+ description: |-
+ apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used
+ by components inside the cluster, like kubelets using the infrastructure rather
+ than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI
+ points to. It is the IP for a self-hosted load balancer in front of the API servers.
type: string
ingressIP:
- description: ingressIP is an external IP which routes to the
- default ingress controller. The IP is a suitable target
- of a wildcard DNS record used to resolve default route host
- names.
+ description: |-
+ ingressIP is an external IP which routes to the default ingress controller.
+ The IP is a suitable target of a wildcard DNS record used to resolve default route host names.
type: string
type: object
external:
@@ -1351,23 +1359,22 @@ spec:
External infrastructure provider.
properties:
cloudControllerManager:
- description: cloudControllerManager contains settings specific
- to the external Cloud Controller Manager (a.k.a. CCM or
- CPI). When omitted, new nodes will be not tainted and no
- extra initialization from the cloud controller manager is
- expected.
+ description: |-
+ cloudControllerManager contains settings specific to the external Cloud Controller Manager (a.k.a. CCM or CPI).
+ When omitted, new nodes will be not tainted
+ and no extra initialization from the cloud controller manager is expected.
properties:
state:
- description: "state determines whether or not an external
- Cloud Controller Manager is expected to be installed
- within the cluster. https://kubernetes.io/docs/tasks/administer-cluster/running-cloud-controller/#running-cloud-controller-manager
- \n Valid values are \"External\", \"None\" and omitted.
- When set to \"External\", new nodes will be tainted
- as uninitialized when created, preventing them from
- running workloads until they are initialized by the
- cloud controller manager. When omitted or set to \"None\",
- new nodes will be not tainted and no extra initialization
- from the cloud controller manager is expected."
+ description: |-
+ state determines whether or not an external Cloud Controller Manager is expected to
+ be installed within the cluster.
+ https://kubernetes.io/docs/tasks/administer-cluster/running-cloud-controller/#running-cloud-controller-manager
+
+ Valid values are "External", "None" and omitted.
+ When set to "External", new nodes will be tainted as uninitialized when created,
+ preventing them from running workloads until they are initialized by the cloud controller manager.
+ When omitted or set to "None", new nodes will be not tainted
+ and no extra initialization from the cloud controller manager is expected.
enum:
- ""
- External
@@ -1399,23 +1406,20 @@ spec:
created for the cluster.
type: string
resourceLabels:
- description: resourceLabels is a list of additional labels
- to apply to GCP resources created for the cluster. See https://cloud.google.com/compute/docs/labeling-resources
- for information on labeling GCP resources. GCP supports
- a maximum of 64 labels per resource. OpenShift reserves
- 32 labels for internal use, allowing 32 labels for user
- configuration.
+ description: |-
+ resourceLabels is a list of additional labels to apply to GCP resources created for the cluster.
+ See https://cloud.google.com/compute/docs/labeling-resources for information on labeling GCP resources.
+ GCP supports a maximum of 64 labels per resource. OpenShift reserves 32 labels for internal use,
+ allowing 32 labels for user configuration.
items:
description: GCPResourceLabel is a label to apply to GCP
resources created for the cluster.
properties:
key:
- description: key is the key part of the label. A label
- key can have a maximum of 63 characters and cannot
- be empty. Label key must begin with a lowercase letter,
- and must contain only lowercase letters, numeric characters,
- and the following special characters `_-`. Label key
- must not have the reserved prefixes `kubernetes-io`
+ description: |-
+ key is the key part of the label. A label key can have a maximum of 63 characters and cannot be empty.
+ Label key must begin with a lowercase letter, and must contain only lowercase letters, numeric characters,
+ and the following special characters `_-`. Label key must not have the reserved prefixes `kubernetes-io`
and `openshift-io`.
maxLength: 63
minLength: 1
@@ -1426,11 +1430,9 @@ spec:
or `kubernetes-io`
rule: '!self.startsWith(''openshift-io'') && !self.startsWith(''kubernetes-io'')'
value:
- description: value is the value part of the label. A
- label value can have a maximum of 63 characters and
- cannot be empty. Value must contain only lowercase
- letters, numeric characters, and the following special
- characters `_-`.
+ description: |-
+ value is the value part of the label. A label value can have a maximum of 63 characters and cannot be empty.
+ Value must contain only lowercase letters, numeric characters, and the following special characters `_-`.
maxLength: 63
minLength: 1
pattern: ^[0-9a-z_-]{1,63}$
@@ -1449,47 +1451,41 @@ spec:
during installation
rule: self.all(x, x in oldSelf) && oldSelf.all(x, x in self)
resourceTags:
- description: resourceTags is a list of additional tags to
- apply to GCP resources created for the cluster. See https://cloud.google.com/resource-manager/docs/tags/tags-overview
- for information on tagging GCP resources. GCP supports a
- maximum of 50 tags per resource.
+ description: |-
+ resourceTags is a list of additional tags to apply to GCP resources created for the cluster.
+ See https://cloud.google.com/resource-manager/docs/tags/tags-overview for information on
+ tagging GCP resources. GCP supports a maximum of 50 tags per resource.
items:
description: GCPResourceTag is a tag to apply to GCP resources
created for the cluster.
properties:
key:
- description: key is the key part of the tag. A tag key
- can have a maximum of 63 characters and cannot be
- empty. Tag key must begin and end with an alphanumeric
- character, and must contain only uppercase, lowercase
- alphanumeric characters, and the following special
- characters `._-`.
+ description: |-
+ key is the key part of the tag. A tag key can have a maximum of 63 characters and cannot be empty.
+ Tag key must begin and end with an alphanumeric character, and must contain only uppercase, lowercase
+ alphanumeric characters, and the following special characters `._-`.
maxLength: 63
minLength: 1
pattern: ^[a-zA-Z0-9]([0-9A-Za-z_.-]{0,61}[a-zA-Z0-9])?$
type: string
parentID:
- description: 'parentID is the ID of the hierarchical
- resource where the tags are defined, e.g. at the Organization
- or the Project level. To find the Organization or
- Project ID refer to the following pages: https://cloud.google.com/resource-manager/docs/creating-managing-organization#retrieving_your_organization_id,
+ description: |-
+ parentID is the ID of the hierarchical resource where the tags are defined,
+ e.g. at the Organization or the Project level. To find the Organization or Project ID refer to the following pages:
+ https://cloud.google.com/resource-manager/docs/creating-managing-organization#retrieving_your_organization_id,
https://cloud.google.com/resource-manager/docs/creating-managing-projects#identifying_projects.
- An OrganizationID must consist of decimal numbers,
- and cannot have leading zeroes. A ProjectID must be
- 6 to 30 characters in length, can only contain lowercase
- letters, numbers, and hyphens, and must start with
- a letter, and cannot end with a hyphen.'
+ An OrganizationID must consist of decimal numbers, and cannot have leading zeroes.
+ A ProjectID must be 6 to 30 characters in length, can only contain lowercase letters, numbers,
+ and hyphens, and must start with a letter, and cannot end with a hyphen.
maxLength: 32
minLength: 1
pattern: (^[1-9][0-9]{0,31}$)|(^[a-z][a-z0-9-]{4,28}[a-z0-9]$)
type: string
value:
- description: value is the value part of the tag. A tag
- value can have a maximum of 63 characters and cannot
- be empty. Tag value must begin and end with an alphanumeric
- character, and must contain only uppercase, lowercase
- alphanumeric characters, and the following special
- characters `_-.@%=+:,*#&(){}[]` and spaces.
+ description: |-
+ value is the value part of the tag. A tag value can have a maximum of 63 characters and cannot be empty.
+ Tag value must begin and end with an alphanumeric character, and must contain only uppercase, lowercase
+ alphanumeric characters, and the following special characters `_-.@%=+:,*#&(){}[]` and spaces.
maxLength: 63
minLength: 1
pattern: ^[a-zA-Z0-9]([0-9A-Za-z_.@%=+:,*#&()\[\]{}\-\s]{0,61}[a-zA-Z0-9])?$
@@ -1521,13 +1517,14 @@ spec:
infrastructure provider.
properties:
cisInstanceCRN:
- description: CISInstanceCRN is the CRN of the Cloud Internet
- Services instance managing the DNS zone for the cluster's
- base domain
+ description: |-
+ CISInstanceCRN is the CRN of the Cloud Internet Services instance managing
+ the DNS zone for the cluster's base domain
type: string
dnsInstanceCRN:
- description: DNSInstanceCRN is the CRN of the DNS Services
- instance managing the DNS zone for the cluster's base domain
+ description: |-
+ DNSInstanceCRN is the CRN of the DNS Services instance managing the DNS zone
+ for the cluster's base domain
type: string
location:
description: Location is where the cluster has been deployed
@@ -1541,26 +1538,23 @@ spec:
IBMCloud resources created for the cluster.
type: string
serviceEndpoints:
- description: serviceEndpoints is a list of custom endpoints
- which will override the default service endpoints of an
- IBM Cloud service. These endpoints are consumed by components
- within the cluster to reach the respective IBM Cloud Services.
+ description: |-
+ serviceEndpoints is a list of custom endpoints which will override the default
+ service endpoints of an IBM Cloud service. These endpoints are consumed by
+ components within the cluster to reach the respective IBM Cloud Services.
items:
- description: IBMCloudServiceEndpoint stores the configuration
- of a custom url to override existing defaults of IBM Cloud
- Services.
+ description: |-
+ IBMCloudServiceEndpoint stores the configuration of a custom url to
+ override existing defaults of IBM Cloud Services.
properties:
name:
- description: 'name is the name of the IBM Cloud service.
- Possible values are: CIS, COS, COSConfig, DNSServices,
- GlobalCatalog, GlobalSearch, GlobalTagging, HyperProtect,
- IAM, KeyProtect, ResourceController, ResourceManager,
- or VPC. For example, the IBM Cloud Private IAM service
- could be configured with the service `name` of `IAM`
- and `url` of `https://private.iam.cloud.ibm.com` Whereas
- the IBM Cloud Private VPC service for US South (Dallas)
- could be configured with the service `name` of `VPC`
- and `url` of `https://us.south.private.iaas.cloud.ibm.com`'
+ description: |-
+ name is the name of the IBM Cloud service.
+ Possible values are: CIS, COS, COSConfig, DNSServices, GlobalCatalog, GlobalSearch, GlobalTagging, HyperProtect, IAM, KeyProtect, ResourceController, ResourceManager, or VPC.
+ For example, the IBM Cloud Private IAM service could be configured with the
+ service `name` of `IAM` and `url` of `https://private.iam.cloud.ibm.com`
+ Whereas the IBM Cloud Private VPC service for US South (Dallas) could be configured
+ with the service `name` of `VPC` and `url` of `https://us.south.private.iaas.cloud.ibm.com`
enum:
- CIS
- COS
@@ -1577,10 +1571,10 @@ spec:
- VPC
type: string
url:
- description: url is fully qualified URI with scheme
- https, that overrides the default generated endpoint
- for a client. This must be provided and cannot be
- empty.
+ description: |-
+ url is fully qualified URI with scheme https, that overrides the default generated
+ endpoint for a client.
+ This must be provided and cannot be empty.
type: string
x-kubernetes-validations:
- message: url must be a valid absolute URL
@@ -1599,19 +1593,16 @@ spec:
infrastructure provider.
properties:
apiServerInternalIP:
- description: apiServerInternalIP is an IP address to contact
- the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. It is the IP that the
- Infrastructure.status.apiServerInternalURI points to. It
- is the IP for a self-hosted load balancer in front of the
- API servers.
+ description: |-
+ apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used
+ by components inside the cluster, like kubelets using the infrastructure rather
+ than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI
+ points to. It is the IP for a self-hosted load balancer in front of the API servers.
type: string
ingressIP:
- description: ingressIP is an external IP which routes to the
- default ingress controller. The IP is a suitable target
- of a wildcard DNS record used to resolve default route host
- names.
+ description: |-
+ ingressIP is an external IP which routes to the default ingress controller.
+ The IP is a suitable target of a wildcard DNS record used to resolve default route host names.
type: string
type: object
nutanix:
@@ -1619,22 +1610,21 @@ spec:
infrastructure provider.
properties:
apiServerInternalIP:
- description: "apiServerInternalIP is an IP address to contact
- the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. It is the IP that the
- Infrastructure.status.apiServerInternalURI points to. It
- is the IP for a self-hosted load balancer in front of the
- API servers. \n Deprecated: Use APIServerInternalIPs instead."
+ description: |-
+ apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used
+ by components inside the cluster, like kubelets using the infrastructure rather
+ than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI
+ points to. It is the IP for a self-hosted load balancer in front of the API servers.
+
+ Deprecated: Use APIServerInternalIPs instead.
type: string
apiServerInternalIPs:
- description: apiServerInternalIPs are the IP addresses to
- contact the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. These are the IPs for
- a self-hosted load balancer in front of the API servers.
- In dual stack clusters this list contains two IPs otherwise
- only one.
+ description: |-
+ apiServerInternalIPs are the IP addresses to contact the Kubernetes API
+ server that can be used by components inside the cluster, like kubelets
+ using the infrastructure rather than Kubernetes networking. These are the
+ IPs for a self-hosted load balancer in front of the API servers. In dual
+ stack clusters this list contains two IPs otherwise only one.
format: ip
items:
type: string
@@ -1648,17 +1638,18 @@ spec:
&& isIP(self[1]) ? ip(self[0]).family() != ip(self[1]).family()
: true)'
ingressIP:
- description: "ingressIP is an external IP which routes to
- the default ingress controller. The IP is a suitable target
- of a wildcard DNS record used to resolve default route host
- names. \n Deprecated: Use IngressIPs instead."
+ description: |-
+ ingressIP is an external IP which routes to the default ingress controller.
+ The IP is a suitable target of a wildcard DNS record used to resolve default route host names.
+
+ Deprecated: Use IngressIPs instead.
type: string
ingressIPs:
- description: ingressIPs are the external IPs which route to
- the default ingress controller. The IPs are suitable targets
- of a wildcard DNS record used to resolve default route host
- names. In dual stack clusters this list contains two IPs
- otherwise only one.
+ description: |-
+ ingressIPs are the external IPs which route to the default ingress
+ controller. The IPs are suitable targets of a wildcard DNS record used to
+ resolve default route host names. In dual stack clusters this list
+ contains two IPs otherwise only one.
format: ip
items:
type: string
@@ -1679,18 +1670,16 @@ spec:
properties:
type:
default: OpenShiftManagedDefault
- description: type defines the type of load balancer used
- by the cluster on Nutanix platform which can be a user-managed
- or openshift-managed load balancer that is to be used
- for the OpenShift API and Ingress endpoints. When set
- to OpenShiftManagedDefault the static pods in charge
- of API and Ingress traffic load-balancing defined in
- the machine config operator will be deployed. When set
- to UserManaged these static pods will not be deployed
- and it is expected that the load balancer is configured
- out of band by the deployer. When omitted, this means
- no opinion and the platform is left to choose a reasonable
- default. The default value is OpenShiftManagedDefault.
+ description: |-
+ type defines the type of load balancer used by the cluster on Nutanix platform
+ which can be a user-managed or openshift-managed load balancer
+ that is to be used for the OpenShift API and Ingress endpoints.
+ When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing
+ defined in the machine config operator will be deployed.
+ When set to UserManaged these static pods will not be deployed and it is expected that
+ the load balancer is configured out of band by the deployer.
+ When omitted, this means no opinion and the platform is left to choose a reasonable default.
+ The default value is OpenShiftManagedDefault.
enum:
- OpenShiftManagedDefault
- UserManaged
@@ -1705,22 +1694,21 @@ spec:
infrastructure provider.
properties:
apiServerInternalIP:
- description: "apiServerInternalIP is an IP address to contact
- the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. It is the IP that the
- Infrastructure.status.apiServerInternalURI points to. It
- is the IP for a self-hosted load balancer in front of the
- API servers. \n Deprecated: Use APIServerInternalIPs instead."
+ description: |-
+ apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used
+ by components inside the cluster, like kubelets using the infrastructure rather
+ than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI
+ points to. It is the IP for a self-hosted load balancer in front of the API servers.
+
+ Deprecated: Use APIServerInternalIPs instead.
type: string
apiServerInternalIPs:
- description: apiServerInternalIPs are the IP addresses to
- contact the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. These are the IPs for
- a self-hosted load balancer in front of the API servers.
- In dual stack clusters this list contains two IPs otherwise
- only one.
+ description: |-
+ apiServerInternalIPs are the IP addresses to contact the Kubernetes API
+ server that can be used by components inside the cluster, like kubelets
+ using the infrastructure rather than Kubernetes networking. These are the
+ IPs for a self-hosted load balancer in front of the API servers. In dual
+ stack clusters this list contains two IPs otherwise only one.
format: ip
items:
type: string
@@ -1734,21 +1722,23 @@ spec:
&& isIP(self[1]) ? ip(self[0]).family() != ip(self[1]).family()
: true)'
cloudName:
- description: cloudName is the name of the desired OpenStack
- cloud in the client configuration file (`clouds.yaml`).
+ description: |-
+ cloudName is the name of the desired OpenStack cloud in the
+ client configuration file (`clouds.yaml`).
type: string
ingressIP:
- description: "ingressIP is an external IP which routes to
- the default ingress controller. The IP is a suitable target
- of a wildcard DNS record used to resolve default route host
- names. \n Deprecated: Use IngressIPs instead."
+ description: |-
+ ingressIP is an external IP which routes to the default ingress controller.
+ The IP is a suitable target of a wildcard DNS record used to resolve default route host names.
+
+ Deprecated: Use IngressIPs instead.
type: string
ingressIPs:
- description: ingressIPs are the external IPs which route to
- the default ingress controller. The IPs are suitable targets
- of a wildcard DNS record used to resolve default route host
- names. In dual stack clusters this list contains two IPs
- otherwise only one.
+ description: |-
+ ingressIPs are the external IPs which route to the default ingress
+ controller. The IPs are suitable targets of a wildcard DNS record used to
+ resolve default route host names. In dual stack clusters this list
+ contains two IPs otherwise only one.
format: ip
items:
type: string
@@ -1769,18 +1759,16 @@ spec:
properties:
type:
default: OpenShiftManagedDefault
- description: type defines the type of load balancer used
- by the cluster on OpenStack platform which can be a
- user-managed or openshift-managed load balancer that
- is to be used for the OpenShift API and Ingress endpoints.
- When set to OpenShiftManagedDefault the static pods
- in charge of API and Ingress traffic load-balancing
+ description: |-
+ type defines the type of load balancer used by the cluster on OpenStack platform
+ which can be a user-managed or openshift-managed load balancer
+ that is to be used for the OpenShift API and Ingress endpoints.
+ When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing
defined in the machine config operator will be deployed.
- When set to UserManaged these static pods will not be
- deployed and it is expected that the load balancer is
- configured out of band by the deployer. When omitted,
- this means no opinion and the platform is left to choose
- a reasonable default. The default value is OpenShiftManagedDefault.
+ When set to UserManaged these static pods will not be deployed and it is expected that
+ the load balancer is configured out of band by the deployer.
+ When omitted, this means no opinion and the platform is left to choose a reasonable default.
+ The default value is OpenShiftManagedDefault.
enum:
- OpenShiftManagedDefault
- UserManaged
@@ -1807,13 +1795,13 @@ spec:
x-kubernetes-validations:
- rule: self.all(x, self.exists_one(y, x == y))
nodeDNSIP:
- description: nodeDNSIP is the IP address for the internal
- DNS used by the nodes. Unlike the one managed by the DNS
- operator, `NodeDNSIP` provides name resolution for the nodes
- themselves. There is no DNS-as-a-service for OpenStack deployments.
- In order to minimize necessary changes to the datacenter
- DNS, a DNS service is hosted as a static pod to serve those
- hostnames to the nodes in the cluster.
+ description: |-
+ nodeDNSIP is the IP address for the internal DNS used by the
+ nodes. Unlike the one managed by the DNS operator, `NodeDNSIP`
+ provides name resolution for the nodes themselves. There is no DNS-as-a-service for
+ OpenStack deployments. In order to minimize necessary changes to the
+ datacenter DNS, a DNS service is hosted as a static pod to serve those hostnames
+ to the nodes in the cluster.
type: string
type: object
ovirt:
@@ -1821,22 +1809,21 @@ spec:
provider.
properties:
apiServerInternalIP:
- description: "apiServerInternalIP is an IP address to contact
- the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. It is the IP that the
- Infrastructure.status.apiServerInternalURI points to. It
- is the IP for a self-hosted load balancer in front of the
- API servers. \n Deprecated: Use APIServerInternalIPs instead."
+ description: |-
+ apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used
+ by components inside the cluster, like kubelets using the infrastructure rather
+ than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI
+ points to. It is the IP for a self-hosted load balancer in front of the API servers.
+
+ Deprecated: Use APIServerInternalIPs instead.
type: string
apiServerInternalIPs:
- description: apiServerInternalIPs are the IP addresses to
- contact the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. These are the IPs for
- a self-hosted load balancer in front of the API servers.
- In dual stack clusters this list contains two IPs otherwise
- only one.
+ description: |-
+ apiServerInternalIPs are the IP addresses to contact the Kubernetes API
+ server that can be used by components inside the cluster, like kubelets
+ using the infrastructure rather than Kubernetes networking. These are the
+ IPs for a self-hosted load balancer in front of the API servers. In dual
+ stack clusters this list contains two IPs otherwise only one.
format: ip
items:
type: string
@@ -1850,17 +1837,18 @@ spec:
&& isIP(self[1]) ? ip(self[0]).family() != ip(self[1]).family()
: true)'
ingressIP:
- description: "ingressIP is an external IP which routes to
- the default ingress controller. The IP is a suitable target
- of a wildcard DNS record used to resolve default route host
- names. \n Deprecated: Use IngressIPs instead."
+ description: |-
+ ingressIP is an external IP which routes to the default ingress controller.
+ The IP is a suitable target of a wildcard DNS record used to resolve default route host names.
+
+ Deprecated: Use IngressIPs instead.
type: string
ingressIPs:
- description: ingressIPs are the external IPs which route to
- the default ingress controller. The IPs are suitable targets
- of a wildcard DNS record used to resolve default route host
- names. In dual stack clusters this list contains two IPs
- otherwise only one.
+ description: |-
+ ingressIPs are the external IPs which route to the default ingress
+ controller. The IPs are suitable targets of a wildcard DNS record used to
+ resolve default route host names. In dual stack clusters this list
+ contains two IPs otherwise only one.
format: ip
items:
type: string
@@ -1881,18 +1869,16 @@ spec:
properties:
type:
default: OpenShiftManagedDefault
- description: type defines the type of load balancer used
- by the cluster on Ovirt platform which can be a user-managed
- or openshift-managed load balancer that is to be used
- for the OpenShift API and Ingress endpoints. When set
- to OpenShiftManagedDefault the static pods in charge
- of API and Ingress traffic load-balancing defined in
- the machine config operator will be deployed. When set
- to UserManaged these static pods will not be deployed
- and it is expected that the load balancer is configured
- out of band by the deployer. When omitted, this means
- no opinion and the platform is left to choose a reasonable
- default. The default value is OpenShiftManagedDefault.
+ description: |-
+ type defines the type of load balancer used by the cluster on Ovirt platform
+ which can be a user-managed or openshift-managed load balancer
+ that is to be used for the OpenShift API and Ingress endpoints.
+ When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing
+ defined in the machine config operator will be deployed.
+ When set to UserManaged these static pods will not be deployed and it is expected that
+ the load balancer is configured out of band by the deployer.
+ When omitted, this means no opinion and the platform is left to choose a reasonable default.
+ The default value is OpenShiftManagedDefault.
enum:
- OpenShiftManagedDefault
- UserManaged
@@ -1911,27 +1897,26 @@ spec:
Virtual Servers infrastructure provider.
properties:
cisInstanceCRN:
- description: CISInstanceCRN is the CRN of the Cloud Internet
- Services instance managing the DNS zone for the cluster's
- base domain
+ description: |-
+ CISInstanceCRN is the CRN of the Cloud Internet Services instance managing
+ the DNS zone for the cluster's base domain
type: string
dnsInstanceCRN:
- description: DNSInstanceCRN is the CRN of the DNS Services
- instance managing the DNS zone for the cluster's base domain
+ description: |-
+ DNSInstanceCRN is the CRN of the DNS Services instance managing the DNS zone
+ for the cluster's base domain
type: string
region:
description: region holds the default Power VS region for
new Power VS resources created by the cluster.
type: string
resourceGroup:
- description: 'resourceGroup is the resource group name for
- new IBMCloud resources created for a cluster. The resource
- group specified here will be used by cluster-image-registry-operator
- to set up a COS Instance in IBMCloud for the cluster registry.
+ description: |-
+ resourceGroup is the resource group name for new IBMCloud resources created for a cluster.
+ The resource group specified here will be used by cluster-image-registry-operator to set up a COS Instance in IBMCloud for the cluster registry.
More about resource groups can be found here: https://cloud.ibm.com/docs/account?topic=account-rgs.
- When omitted, the image registry operator won''t be able
- to configure storage, which results in the image registry
- cluster operator not being in an available state.'
+ When omitted, the image registry operator won't be able to configure storage,
+ which results in the image registry cluster operator not being in an available state.
maxLength: 40
pattern: ^[a-zA-Z0-9-_ ]+$
type: string
@@ -1939,26 +1924,42 @@ spec:
- message: resourceGroup is immutable once set
rule: oldSelf == '' || self == oldSelf
serviceEndpoints:
- description: serviceEndpoints is a list of custom endpoints
- which will override the default service endpoints of a Power
- VS service.
+ description: |-
+ serviceEndpoints is a list of custom endpoints which will override the default
+ service endpoints of a Power VS service.
items:
- description: PowervsServiceEndpoint stores the configuration
- of a custom url to override existing defaults of PowerVS
- Services.
+ description: |-
+ PowervsServiceEndpoint stores the configuration of a custom url to
+ override existing defaults of PowerVS Services.
properties:
name:
- description: name is the name of the Power VS service.
- Few of the services are IAM - https://cloud.ibm.com/apidocs/iam-identity-token-api
+ description: |-
+ name is the name of the Power VS service.
+ Few of the services are
+ IAM - https://cloud.ibm.com/apidocs/iam-identity-token-api
ResourceController - https://cloud.ibm.com/apidocs/resource-controller/resource-controller
Power Cloud - https://cloud.ibm.com/apidocs/power-cloud
- pattern: ^[a-z0-9-]+$
+ enum:
+ - CIS
+ - COS
+ - COSConfig
+ - DNSServices
+ - GlobalCatalog
+ - GlobalSearch
+ - GlobalTagging
+ - HyperProtect
+ - IAM
+ - KeyProtect
+ - Power
+ - ResourceController
+ - ResourceManager
+ - VPC
type: string
url:
- description: url is fully qualified URI with scheme
- https, that overrides the default generated endpoint
- for a client. This must be provided and cannot be
- empty.
+ description: |-
+ url is fully qualified URI with scheme https, that overrides the default generated
+ endpoint for a client.
+ This must be provided and cannot be empty.
format: uri
pattern: ^https://
type: string
@@ -1971,27 +1972,27 @@ spec:
- name
x-kubernetes-list-type: map
zone:
- description: 'zone holds the default zone for the new Power
- VS resources created by the cluster. Note: Currently only
- single-zone OCP clusters are supported'
+ description: |-
+ zone holds the default zone for the new Power VS resources created by the cluster.
+ Note: Currently only single-zone OCP clusters are supported
type: string
type: object
x-kubernetes-validations:
- message: cannot unset resourceGroup once set
rule: '!has(oldSelf.resourceGroup) || has(self.resourceGroup)'
type:
- description: "type is the underlying infrastructure provider for
- the cluster. This value controls whether infrastructure automation
- such as service load balancers, dynamic volume provisioning,
- machine creation and deletion, and other integrations are enabled.
- If None, no infrastructure automation is enabled. Allowed values
- are \"AWS\", \"Azure\", \"BareMetal\", \"GCP\", \"Libvirt\",
- \"OpenStack\", \"VSphere\", \"oVirt\", \"EquinixMetal\", \"PowerVS\",
- \"AlibabaCloud\", \"Nutanix\" and \"None\". Individual components
- may not support all platforms, and must handle unrecognized
- platforms as None if they do not support that platform. \n This
- value will be synced with to the `status.platform` and `status.platformStatus.type`.
- Currently this value cannot be changed once set."
+ description: |-
+ type is the underlying infrastructure provider for the cluster. This
+ value controls whether infrastructure automation such as service load
+ balancers, dynamic volume provisioning, machine creation and deletion, and
+ other integrations are enabled. If None, no infrastructure automation is
+ enabled. Allowed values are "AWS", "Azure", "BareMetal", "GCP", "Libvirt",
+ "OpenStack", "VSphere", "oVirt", "EquinixMetal", "PowerVS", "AlibabaCloud", "Nutanix" and "None".
+ Individual components may not support all platforms, and must handle
+ unrecognized platforms as None if they do not support that platform.
+
+ This value will be synced with to the `status.platform` and `status.platformStatus.type`.
+ Currently this value cannot be changed once set.
enum:
- ""
- AWS
@@ -2016,22 +2017,21 @@ spec:
infrastructure provider.
properties:
apiServerInternalIP:
- description: "apiServerInternalIP is an IP address to contact
- the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. It is the IP that the
- Infrastructure.status.apiServerInternalURI points to. It
- is the IP for a self-hosted load balancer in front of the
- API servers. \n Deprecated: Use APIServerInternalIPs instead."
+ description: |-
+ apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used
+ by components inside the cluster, like kubelets using the infrastructure rather
+ than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI
+ points to. It is the IP for a self-hosted load balancer in front of the API servers.
+
+ Deprecated: Use APIServerInternalIPs instead.
type: string
apiServerInternalIPs:
- description: apiServerInternalIPs are the IP addresses to
- contact the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. These are the IPs for
- a self-hosted load balancer in front of the API servers.
- In dual stack clusters this list contains two IPs otherwise
- only one.
+ description: |-
+ apiServerInternalIPs are the IP addresses to contact the Kubernetes API
+ server that can be used by components inside the cluster, like kubelets
+ using the infrastructure rather than Kubernetes networking. These are the
+ IPs for a self-hosted load balancer in front of the API servers. In dual
+ stack clusters this list contains two IPs otherwise only one.
format: ip
items:
type: string
@@ -2045,17 +2045,18 @@ spec:
&& isIP(self[1]) ? ip(self[0]).family() != ip(self[1]).family()
: true)'
ingressIP:
- description: "ingressIP is an external IP which routes to
- the default ingress controller. The IP is a suitable target
- of a wildcard DNS record used to resolve default route host
- names. \n Deprecated: Use IngressIPs instead."
+ description: |-
+ ingressIP is an external IP which routes to the default ingress controller.
+ The IP is a suitable target of a wildcard DNS record used to resolve default route host names.
+
+ Deprecated: Use IngressIPs instead.
type: string
ingressIPs:
- description: ingressIPs are the external IPs which route to
- the default ingress controller. The IPs are suitable targets
- of a wildcard DNS record used to resolve default route host
- names. In dual stack clusters this list contains two IPs
- otherwise only one.
+ description: |-
+ ingressIPs are the external IPs which route to the default ingress
+ controller. The IPs are suitable targets of a wildcard DNS record used to
+ resolve default route host names. In dual stack clusters this list
+ contains two IPs otherwise only one.
format: ip
items:
type: string
@@ -2076,18 +2077,16 @@ spec:
properties:
type:
default: OpenShiftManagedDefault
- description: type defines the type of load balancer used
- by the cluster on VSphere platform which can be a user-managed
- or openshift-managed load balancer that is to be used
- for the OpenShift API and Ingress endpoints. When set
- to OpenShiftManagedDefault the static pods in charge
- of API and Ingress traffic load-balancing defined in
- the machine config operator will be deployed. When set
- to UserManaged these static pods will not be deployed
- and it is expected that the load balancer is configured
- out of band by the deployer. When omitted, this means
- no opinion and the platform is left to choose a reasonable
- default. The default value is OpenShiftManagedDefault.
+ description: |-
+ type defines the type of load balancer used by the cluster on VSphere platform
+ which can be a user-managed or openshift-managed load balancer
+ that is to be used for the OpenShift API and Ingress endpoints.
+ When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing
+ defined in the machine config operator will be deployed.
+ When set to UserManaged these static pods will not be deployed and it is expected that
+ the load balancer is configured out of band by the deployer.
+ When omitted, this means no opinion and the platform is left to choose a reasonable default.
+ The default value is OpenShiftManagedDefault.
enum:
- OpenShiftManagedDefault
- UserManaged
@@ -2114,13 +2113,13 @@ spec:
x-kubernetes-validations:
- rule: self.all(x, self.exists_one(y, x == y))
nodeDNSIP:
- description: nodeDNSIP is the IP address for the internal
- DNS used by the nodes. Unlike the one managed by the DNS
- operator, `NodeDNSIP` provides name resolution for the nodes
- themselves. There is no DNS-as-a-service for vSphere deployments.
- In order to minimize necessary changes to the datacenter
- DNS, a DNS service is hosted as a static pod to serve those
- hostnames to the nodes in the cluster.
+ description: |-
+ nodeDNSIP is the IP address for the internal DNS used by the
+ nodes. Unlike the one managed by the DNS operator, `NodeDNSIP`
+ provides name resolution for the nodes themselves. There is no DNS-as-a-service for
+ vSphere deployments. In order to minimize necessary changes to the
+ datacenter DNS, a DNS service is hosted as a static pod to serve those hostnames
+ to the nodes in the cluster.
type: string
type: object
type: object
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_infrastructures-DevPreviewNoUpgrade.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_infrastructures-DevPreviewNoUpgrade.crd.yaml
index a3aae4734b71511e459aaeb98cfe58c3676911af..02f8be7cb22521ade738ee00030cc4eb5ae7bc94 100644
--- a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_infrastructures-DevPreviewNoUpgrade.crd.yaml
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_infrastructures-DevPreviewNoUpgrade.crd.yaml
@@ -21,20 +21,25 @@ spec:
- name: v1
schema:
openAPIV3Schema:
- description: "Infrastructure holds cluster-wide information about Infrastructure.
- \ The canonical name is `cluster` \n Compatibility level 1: Stable within
- a major release for a minimum of 12 months or 3 minor releases (whichever
- is longer)."
+ description: |-
+ Infrastructure holds cluster-wide information about Infrastructure. The canonical name is `cluster`
+
+ Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -42,19 +47,19 @@ spec:
description: spec holds user settable values for configuration
properties:
cloudConfig:
- description: "cloudConfig is a reference to a ConfigMap containing
- the cloud provider configuration file. This configuration file is
- used to configure the Kubernetes cloud provider integration when
- using the built-in cloud provider integration or the external cloud
- controller manager. The namespace for this config map is openshift-config.
- \n cloudConfig should only be consumed by the kube_cloud_config
- controller. The controller is responsible for using the user configuration
- in the spec for various platforms and combining that with the user
- provided ConfigMap in this field to create a stitched kube cloud
- config. The controller generates a ConfigMap `kube-cloud-config`
- in `openshift-config-managed` namespace with the kube cloud config
- is stored in `cloud.conf` key. All the clients are expected to use
- the generated ConfigMap only."
+ description: |-
+ cloudConfig is a reference to a ConfigMap containing the cloud provider configuration file.
+ This configuration file is used to configure the Kubernetes cloud provider integration
+ when using the built-in cloud provider integration or the external cloud controller manager.
+ The namespace for this config map is openshift-config.
+
+ cloudConfig should only be consumed by the kube_cloud_config controller.
+ The controller is responsible for using the user configuration in the spec
+ for various platforms and combining that with the user provided ConfigMap in this field
+ to create a stitched kube cloud config.
+ The controller generates a ConfigMap `kube-cloud-config` in `openshift-config-managed` namespace
+ with the kube cloud config is stored in `cloud.conf` key.
+ All the clients are expected to use the generated ConfigMap only.
properties:
key:
description: Key allows pointing to a specific key/value inside
@@ -64,8 +69,9 @@ spec:
type: string
type: object
platformSpec:
- description: platformSpec holds desired information specific to the
- underlying infrastructure provider.
+ description: |-
+ platformSpec holds desired information specific to the underlying
+ infrastructure provider.
properties:
alibabaCloud:
description: AlibabaCloud contains settings specific to the Alibaba
@@ -76,24 +82,27 @@ spec:
Services infrastructure provider.
properties:
serviceEndpoints:
- description: serviceEndpoints list contains custom endpoints
- which will override default service endpoint of AWS Services.
+ description: |-
+ serviceEndpoints list contains custom endpoints which will override default
+ service endpoint of AWS Services.
There must be only one ServiceEndpoint for a service.
items:
- description: AWSServiceEndpoint store the configuration
- of a custom url to override existing defaults of AWS Services.
+ description: |-
+ AWSServiceEndpoint store the configuration of a custom url to
+ override existing defaults of AWS Services.
properties:
name:
- description: name is the name of the AWS service. The
- list of all the service names can be found at https://docs.aws.amazon.com/general/latest/gr/aws-service-information.html
+ description: |-
+ name is the name of the AWS service.
+ The list of all the service names can be found at https://docs.aws.amazon.com/general/latest/gr/aws-service-information.html
This must be provided and cannot be empty.
pattern: ^[a-z0-9-]+$
type: string
url:
- description: url is fully qualified URI with scheme
- https, that overrides the default generated endpoint
- for a client. This must be provided and cannot be
- empty.
+ description: |-
+ url is fully qualified URI with scheme https, that overrides the default generated
+ endpoint for a client.
+ This must be provided and cannot be empty.
pattern: ^https://
type: string
type: object
@@ -109,17 +118,16 @@ spec:
platform.
properties:
apiServerInternalIPs:
- description: apiServerInternalIPs are the IP addresses to
- contact the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. These are the IPs for
- a self-hosted load balancer in front of the API servers.
- In dual stack clusters this list contains two IP addresses,
- one from IPv4 family and one from IPv6. In single stack
- clusters a single IP address is expected. When omitted,
- values from the status.apiServerInternalIPs will be used.
- Once set, the list cannot be completely removed (but its
- second entry can).
+ description: |-
+ apiServerInternalIPs are the IP addresses to contact the Kubernetes API
+ server that can be used by components inside the cluster, like kubelets
+ using the infrastructure rather than Kubernetes networking. These are the
+ IPs for a self-hosted load balancer in front of the API servers.
+ In dual stack clusters this list contains two IP addresses, one from IPv4
+ family and one from IPv6.
+ In single stack clusters a single IP address is expected.
+ When omitted, values from the status.apiServerInternalIPs will be used.
+ Once set, the list cannot be completely removed (but its second entry can).
items:
description: IP is an IP address (for example, "10.0.0.0"
or "fd00::").
@@ -138,15 +146,15 @@ spec:
rule: 'size(self) == 2 && isIP(self[0]) && isIP(self[1])
? ip(self[0]).family() != ip(self[1]).family() : true'
ingressIPs:
- description: ingressIPs are the external IPs which route to
- the default ingress controller. The IPs are suitable targets
- of a wildcard DNS record used to resolve default route host
- names. In dual stack clusters this list contains two IP
- addresses, one from IPv4 family and one from IPv6. In single
- stack clusters a single IP address is expected. When omitted,
- values from the status.ingressIPs will be used. Once set,
- the list cannot be completely removed (but its second entry
- can).
+ description: |-
+ ingressIPs are the external IPs which route to the default ingress
+ controller. The IPs are suitable targets of a wildcard DNS record used to
+ resolve default route host names.
+ In dual stack clusters this list contains two IP addresses, one from IPv4
+ family and one from IPv6.
+ In single stack clusters a single IP address is expected.
+ When omitted, values from the status.ingressIPs will be used.
+ Once set, the list cannot be completely removed (but its second entry can).
items:
description: IP is an IP address (for example, "10.0.0.0"
or "fd00::").
@@ -165,10 +173,10 @@ spec:
rule: 'size(self) == 2 && isIP(self[0]) && isIP(self[1])
? ip(self[0]).family() != ip(self[1]).family() : true'
machineNetworks:
- description: machineNetworks are IP networks used to connect
- all the OpenShift cluster nodes. Each network is provided
- in the CIDR format and should be IPv4 or IPv6, for example
- "10.0.0.0/8" or "fd00::/8".
+ description: |-
+ machineNetworks are IP networks used to connect all the OpenShift cluster
+ nodes. Each network is provided in the CIDR format and should be IPv4 or IPv6,
+ for example "10.0.0.0/8" or "fd00::/8".
items:
description: CIDR is an IP address range in CIDR notation
(for example, "10.0.0.0/8" or "fd00::/8").
@@ -194,17 +202,15 @@ spec:
Metal infrastructure provider.
type: object
external:
- description: ExternalPlatformType represents generic infrastructure
- provider. Platform-specific components should be supplemented
- separately.
+ description: |-
+ ExternalPlatformType represents generic infrastructure provider.
+ Platform-specific components should be supplemented separately.
properties:
platformName:
default: Unknown
- description: PlatformName holds the arbitrary string representing
- the infrastructure provider name, expected to be set at
- the installation time. This field is solely for informational
- and reporting purposes and is not expected to be used for
- decision-making.
+ description: |-
+ PlatformName holds the arbitrary string representing the infrastructure provider name, expected to be set at the installation time.
+ This field is solely for informational and reporting purposes and is not expected to be used for decision-making.
type: string
x-kubernetes-validations:
- message: platform name cannot be changed once set
@@ -227,20 +233,19 @@ spec:
infrastructure provider.
properties:
failureDomains:
- description: failureDomains configures failure domains information
- for the Nutanix platform. When set, the failure domains
- defined here may be used to spread Machines across prism
- element clusters to improve fault tolerance of the cluster.
+ description: |-
+ failureDomains configures failure domains information for the Nutanix platform.
+ When set, the failure domains defined here may be used to spread Machines across
+ prism element clusters to improve fault tolerance of the cluster.
items:
description: NutanixFailureDomain configures failure domain
information for the Nutanix platform.
properties:
cluster:
- description: cluster is to identify the cluster (the
- Prism Element under management of the Prism Central),
- in which the Machine's VM will be created. The cluster
- identifier (uuid or name) can be obtained from the
- Prism Central console or using the prism_central API.
+ description: |-
+ cluster is to identify the cluster (the Prism Element under management of the Prism Central),
+ in which the Machine's VM will be created. The cluster identifier (uuid or name) can be obtained
+ from the Prism Central console or using the prism_central API.
properties:
name:
description: name is the resource name in the PC.
@@ -270,23 +275,22 @@ spec:
rule: 'has(self.type) && self.type == ''Name'' ? has(self.name)
: !has(self.name)'
name:
- description: name defines the unique name of a failure
- domain. Name is required and must be at most 64 characters
- in length. It must consist of only lower case alphanumeric
- characters and hyphens (-). It must start and end
- with an alphanumeric character. This value is arbitrary
- and is used to identify the failure domain within
- the platform.
+ description: |-
+ name defines the unique name of a failure domain.
+ Name is required and must be at most 64 characters in length.
+ It must consist of only lower case alphanumeric characters and hyphens (-).
+ It must start and end with an alphanumeric character.
+ This value is arbitrary and is used to identify the failure domain within the platform.
maxLength: 64
minLength: 1
pattern: '[a-z0-9]([-a-z0-9]*[a-z0-9])?'
type: string
subnets:
- description: subnets holds a list of identifiers (one
- or more) of the cluster's network subnets for the
- Machine's VM to connect to. The subnet identifiers
- (uuid or name) can be obtained from the Prism Central
- console or using the prism_central API.
+ description: |-
+ subnets holds a list of identifiers (one or more) of the cluster's network subnets
+ If the feature gate NutanixMultiSubnets is enabled, up to 32 subnets may be configured.
+ for the Machine's VM to connect to. The subnet identifiers (uuid or name) can be
+ obtained from the Prism Central console or using the prism_central API.
items:
description: NutanixResourceIdentifier holds the identity
of a Nutanix PC resource (cluster, image, subnet,
@@ -320,27 +324,28 @@ spec:
is Name, and forbidden otherwise
rule: 'has(self.type) && self.type == ''Name'' ? has(self.name)
: !has(self.name)'
- maxItems: 1
+ maxItems: 32
minItems: 1
type: array
- x-kubernetes-list-map-keys:
- - type
- x-kubernetes-list-type: map
+ x-kubernetes-list-type: atomic
+ x-kubernetes-validations:
+ - message: each subnet must be unique
+ rule: self.all(x, self.exists_one(y, x == y))
required:
- cluster
- name
- subnets
type: object
+ maxItems: 32
type: array
x-kubernetes-list-map-keys:
- name
x-kubernetes-list-type: map
prismCentral:
- description: prismCentral holds the endpoint address and port
- to access the Nutanix Prism Central. When a cluster-wide
- proxy is installed, by default, this endpoint will be accessed
- via the proxy. Should you wish for communication with this
- endpoint not to be proxied, please add the endpoint to the
+ description: |-
+ prismCentral holds the endpoint address and port to access the Nutanix Prism Central.
+ When a cluster-wide proxy is installed, by default, this endpoint will be accessed via the proxy.
+ Should you wish for communication with this endpoint not to be proxied, please add the endpoint to the
proxy spec.noProxy list.
properties:
address:
@@ -361,25 +366,22 @@ spec:
- port
type: object
prismElements:
- description: prismElements holds one or more endpoint address
- and port data to access the Nutanix Prism Elements (clusters)
- of the Nutanix Prism Central. Currently we only support
- one Prism Element (cluster) for an OpenShift cluster, where
- all the Nutanix resources (VMs, subnets, volumes, etc.)
- used in the OpenShift cluster are located. In the future,
- we may support Nutanix resources (VMs, etc.) spread over
- multiple Prism Elements (clusters) of the Prism Central.
+ description: |-
+ prismElements holds one or more endpoint address and port data to access the Nutanix
+ Prism Elements (clusters) of the Nutanix Prism Central. Currently we only support one
+ Prism Element (cluster) for an OpenShift cluster, where all the Nutanix resources (VMs, subnets, volumes, etc.)
+ used in the OpenShift cluster are located. In the future, we may support Nutanix resources (VMs, etc.)
+ spread over multiple Prism Elements (clusters) of the Prism Central.
items:
description: NutanixPrismElementEndpoint holds the name
and endpoint data for a Prism Element (cluster)
properties:
endpoint:
- description: endpoint holds the endpoint address and
- port data of the Prism Element (cluster). When a cluster-wide
- proxy is installed, by default, this endpoint will
- be accessed via the proxy. Should you wish for communication
- with this endpoint not to be proxied, please add the
- endpoint to the proxy spec.noProxy list.
+ description: |-
+ endpoint holds the endpoint address and port data of the Prism Element (cluster).
+ When a cluster-wide proxy is installed, by default, this endpoint will be accessed via the proxy.
+ Should you wish for communication with this endpoint not to be proxied, please add the endpoint to the
+ proxy spec.noProxy list.
properties:
address:
description: address is the endpoint address (DNS
@@ -399,10 +401,9 @@ spec:
- port
type: object
name:
- description: name is the name of the Prism Element (cluster).
- This value will correspond with the cluster field
- configured on other resources (eg Machines, PVCs,
- etc).
+ description: |-
+ name is the name of the Prism Element (cluster). This value will correspond with
+ the cluster field configured on other resources (eg Machines, PVCs, etc).
maxLength: 256
type: string
required:
@@ -422,17 +423,16 @@ spec:
infrastructure provider.
properties:
apiServerInternalIPs:
- description: apiServerInternalIPs are the IP addresses to
- contact the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. These are the IPs for
- a self-hosted load balancer in front of the API servers.
- In dual stack clusters this list contains two IP addresses,
- one from IPv4 family and one from IPv6. In single stack
- clusters a single IP address is expected. When omitted,
- values from the status.apiServerInternalIPs will be used.
- Once set, the list cannot be completely removed (but its
- second entry can).
+ description: |-
+ apiServerInternalIPs are the IP addresses to contact the Kubernetes API
+ server that can be used by components inside the cluster, like kubelets
+ using the infrastructure rather than Kubernetes networking. These are the
+ IPs for a self-hosted load balancer in front of the API servers.
+ In dual stack clusters this list contains two IP addresses, one from IPv4
+ family and one from IPv6.
+ In single stack clusters a single IP address is expected.
+ When omitted, values from the status.apiServerInternalIPs will be used.
+ Once set, the list cannot be completely removed (but its second entry can).
items:
description: IP is an IP address (for example, "10.0.0.0"
or "fd00::").
@@ -451,15 +451,15 @@ spec:
rule: 'size(self) == 2 && isIP(self[0]) && isIP(self[1])
? ip(self[0]).family() != ip(self[1]).family() : true'
ingressIPs:
- description: ingressIPs are the external IPs which route to
- the default ingress controller. The IPs are suitable targets
- of a wildcard DNS record used to resolve default route host
- names. In dual stack clusters this list contains two IP
- addresses, one from IPv4 family and one from IPv6. In single
- stack clusters a single IP address is expected. When omitted,
- values from the status.ingressIPs will be used. Once set,
- the list cannot be completely removed (but its second entry
- can).
+ description: |-
+ ingressIPs are the external IPs which route to the default ingress
+ controller. The IPs are suitable targets of a wildcard DNS record used to
+ resolve default route host names.
+ In dual stack clusters this list contains two IP addresses, one from IPv4
+ family and one from IPv6.
+ In single stack clusters a single IP address is expected.
+ When omitted, values from the status.ingressIPs will be used.
+ Once set, the list cannot be completely removed (but its second entry can).
items:
description: IP is an IP address (for example, "10.0.0.0"
or "fd00::").
@@ -478,10 +478,10 @@ spec:
rule: 'size(self) == 2 && isIP(self[0]) && isIP(self[1])
? ip(self[0]).family() != ip(self[1]).family() : true'
machineNetworks:
- description: machineNetworks are IP networks used to connect
- all the OpenShift cluster nodes. Each network is provided
- in the CIDR format and should be IPv4 or IPv6, for example
- "10.0.0.0/8" or "fd00::/8".
+ description: |-
+ machineNetworks are IP networks used to connect all the OpenShift cluster
+ nodes. Each network is provided in the CIDR format and should be IPv4 or IPv6,
+ for example "10.0.0.0/8" or "fd00::/8".
items:
description: CIDR is an IP address range in CIDR notation
(for example, "10.0.0.0/8" or "fd00::/8").
@@ -511,26 +511,42 @@ spec:
Systems Virtual Servers infrastructure provider.
properties:
serviceEndpoints:
- description: serviceEndpoints is a list of custom endpoints
- which will override the default service endpoints of a Power
- VS service.
+ description: |-
+ serviceEndpoints is a list of custom endpoints which will override the default
+ service endpoints of a Power VS service.
items:
- description: PowervsServiceEndpoint stores the configuration
- of a custom url to override existing defaults of PowerVS
- Services.
+ description: |-
+ PowervsServiceEndpoint stores the configuration of a custom url to
+ override existing defaults of PowerVS Services.
properties:
name:
- description: name is the name of the Power VS service.
- Few of the services are IAM - https://cloud.ibm.com/apidocs/iam-identity-token-api
+ description: |-
+ name is the name of the Power VS service.
+ Few of the services are
+ IAM - https://cloud.ibm.com/apidocs/iam-identity-token-api
ResourceController - https://cloud.ibm.com/apidocs/resource-controller/resource-controller
Power Cloud - https://cloud.ibm.com/apidocs/power-cloud
- pattern: ^[a-z0-9-]+$
+ enum:
+ - CIS
+ - COS
+ - COSConfig
+ - DNSServices
+ - GlobalCatalog
+ - GlobalSearch
+ - GlobalTagging
+ - HyperProtect
+ - IAM
+ - KeyProtect
+ - Power
+ - ResourceController
+ - ResourceManager
+ - VPC
type: string
url:
- description: url is fully qualified URI with scheme
- https, that overrides the default generated endpoint
- for a client. This must be provided and cannot be
- empty.
+ description: |-
+ url is fully qualified URI with scheme https, that overrides the default generated
+ endpoint for a client.
+ This must be provided and cannot be empty.
format: uri
pattern: ^https://
type: string
@@ -544,16 +560,15 @@ spec:
x-kubernetes-list-type: map
type: object
type:
- description: type is the underlying infrastructure provider for
- the cluster. This value controls whether infrastructure automation
- such as service load balancers, dynamic volume provisioning,
- machine creation and deletion, and other integrations are enabled.
- If None, no infrastructure automation is enabled. Allowed values
- are "AWS", "Azure", "BareMetal", "GCP", "Libvirt", "OpenStack",
- "VSphere", "oVirt", "KubeVirt", "EquinixMetal", "PowerVS", "AlibabaCloud",
- "Nutanix" and "None". Individual components may not support
- all platforms, and must handle unrecognized platforms as None
- if they do not support that platform.
+ description: |-
+ type is the underlying infrastructure provider for the cluster. This
+ value controls whether infrastructure automation such as service load
+ balancers, dynamic volume provisioning, machine creation and deletion, and
+ other integrations are enabled. If None, no infrastructure automation is
+ enabled. Allowed values are "AWS", "Azure", "BareMetal", "GCP", "Libvirt",
+ "OpenStack", "VSphere", "oVirt", "KubeVirt", "EquinixMetal", "PowerVS",
+ "AlibabaCloud", "Nutanix" and "None". Individual components may not support all platforms,
+ and must handle unrecognized platforms as None if they do not support that platform.
enum:
- ""
- AWS
@@ -578,17 +593,16 @@ spec:
infrastructure provider.
properties:
apiServerInternalIPs:
- description: apiServerInternalIPs are the IP addresses to
- contact the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. These are the IPs for
- a self-hosted load balancer in front of the API servers.
- In dual stack clusters this list contains two IP addresses,
- one from IPv4 family and one from IPv6. In single stack
- clusters a single IP address is expected. When omitted,
- values from the status.apiServerInternalIPs will be used.
- Once set, the list cannot be completely removed (but its
- second entry can).
+ description: |-
+ apiServerInternalIPs are the IP addresses to contact the Kubernetes API
+ server that can be used by components inside the cluster, like kubelets
+ using the infrastructure rather than Kubernetes networking. These are the
+ IPs for a self-hosted load balancer in front of the API servers.
+ In dual stack clusters this list contains two IP addresses, one from IPv4
+ family and one from IPv6.
+ In single stack clusters a single IP address is expected.
+ When omitted, values from the status.apiServerInternalIPs will be used.
+ Once set, the list cannot be completely removed (but its second entry can).
items:
description: IP is an IP address (for example, "10.0.0.0"
or "fd00::").
@@ -607,24 +621,26 @@ spec:
rule: 'size(self) == 2 && isIP(self[0]) && isIP(self[1])
? ip(self[0]).family() != ip(self[1]).family() : true'
failureDomains:
- description: failureDomains contains the definition of region,
- zone and the vCenter topology. If this is omitted failure
- domains (regions and zones) will not be used.
+ description: |-
+ failureDomains contains the definition of region, zone and the vCenter topology.
+ If this is omitted failure domains (regions and zones) will not be used.
items:
- description: VSpherePlatformFailureDomainSpec holds the
- region and zone failure domain and the vCenter topology
- of that failure domain.
+ description: |-
+ VSpherePlatformFailureDomainSpec holds the region and zone failure domain and
+ the vCenter topology of that failure domain.
properties:
name:
- description: name defines the arbitrary but unique name
+ description: |-
+ name defines the arbitrary but unique name
of a failure domain.
maxLength: 256
minLength: 1
type: string
region:
- description: region defines the name of a region tag
- that will be attached to a vCenter datacenter. The
- tag category in vCenter must be named openshift-region.
+ description: |-
+ region defines the name of a region tag that will
+ be attached to a vCenter datacenter. The tag
+ category in vCenter must be named openshift-region.
maxLength: 80
minLength: 1
type: string
@@ -634,7 +650,7 @@ spec:
- format: ipv6
- format: hostname
description: server is the fully-qualified domain name
- or the IP address of the vCenter server. ---
+ or the IP address of the vCenter server.
maxLength: 255
minLength: 1
type: string
@@ -643,45 +659,48 @@ spec:
using vSphere constructs
properties:
computeCluster:
- description: computeCluster the absolute path of
- the vCenter cluster in which virtual machine will
- be located. The absolute path is of the form /<datacenter>/host/<cluster>.
+ description: |-
+ computeCluster the absolute path of the vCenter cluster
+ in which virtual machine will be located.
+ The absolute path is of the form /<datacenter>/host/<cluster>.
The maximum length of the path is 2048 characters.
maxLength: 2048
pattern: ^/.*?/host/.*?
type: string
datacenter:
- description: datacenter is the name of vCenter datacenter
- in which virtual machines will be located. The
- maximum length of the datacenter name is 80 characters.
+ description: |-
+ datacenter is the name of vCenter datacenter in which virtual machines will be located.
+ The maximum length of the datacenter name is 80 characters.
maxLength: 80
type: string
datastore:
- description: datastore is the absolute path of the
- datastore in which the virtual machine is located.
+ description: |-
+ datastore is the absolute path of the datastore in which the
+ virtual machine is located.
The absolute path is of the form /<datacenter>/datastore/<datastore>
The maximum length of the path is 2048 characters.
maxLength: 2048
pattern: ^/.*?/datastore/.*?
type: string
folder:
- description: folder is the absolute path of the
- folder where virtual machines are located. The
- absolute path is of the form /<datacenter>/vm/<folder>.
+ description: |-
+ folder is the absolute path of the folder where
+ virtual machines are located. The absolute path
+ is of the form /<datacenter>/vm/<folder>.
The maximum length of the path is 2048 characters.
maxLength: 2048
pattern: ^/.*?/vm/.*?
type: string
networks:
- description: 'networks is the list of port group
- network names within this failure domain. If feature
- gate VSphereMultiNetworks is enabled, up to 10
- network adapters may be defined. 10 is the maximum
- number of virtual network devices which may be
- attached to a VM as defined by: https://configmax.esp.vmware.com/guest?vmwareproduct=vSphere&release=vSphere%208.0&categories=1-0
- The available networks (port groups) can be listed
- using `govc ls ''network/*''` Networks should
- be in the form of an absolute path: /<datacenter>/network/<portgroup>.'
+ description: |-
+ networks is the list of port group network names within this failure domain.
+ If feature gate VSphereMultiNetworks is enabled, up to 10 network adapters may be defined.
+ 10 is the maximum number of virtual network devices which may be attached to a VM as defined by:
+ https://configmax.esp.vmware.com/guest?vmwareproduct=vSphere&release=vSphere%208.0&categories=1-0
+ The available networks (port groups) can be listed using
+ `govc ls 'network/*'`
+ Networks should be in the form of an absolute path:
+ /<datacenter>/network/<portgroup>.
items:
type: string
maxItems: 10
@@ -689,25 +708,24 @@ spec:
type: array
x-kubernetes-list-type: atomic
resourcePool:
- description: resourcePool is the absolute path of
- the resource pool where virtual machines will
- be created. The absolute path is of the form /<datacenter>/host/<cluster>/Resources/<resourcepool>.
+ description: |-
+ resourcePool is the absolute path of the resource pool where virtual machines will be
+ created. The absolute path is of the form /<datacenter>/host/<cluster>/Resources/<resourcepool>.
The maximum length of the path is 2048 characters.
maxLength: 2048
pattern: ^/.*?/host/.*?/Resources.*
type: string
template:
- description: "template is the full inventory path
- of the virtual machine or template that will be
- cloned when creating new machines in this failure
- domain. The maximum length of the path is 2048
- characters. \n When omitted, the template will
- be calculated by the control plane machineset
- operator based on the region and zone defined
- in VSpherePlatformFailureDomainSpec. For example,
- for zone=zonea, region=region1, and infrastructure
- name=test, the template path would be calculated
- as /<datacenter>/vm/test-rhcos-region1-zonea."
+ description: |-
+ template is the full inventory path of the virtual machine or template
+ that will be cloned when creating new machines in this failure domain.
+ The maximum length of the path is 2048 characters.
+
+ When omitted, the template will be calculated by the control plane
+ machineset operator based on the region and zone defined in
+ VSpherePlatformFailureDomainSpec.
+ For example, for zone=zonea, region=region1, and infrastructure name=test,
+ the template path would be calculated as /<datacenter>/vm/test-rhcos-region1-zonea.
maxLength: 2048
minLength: 1
pattern: ^/.*?/vm/.*?
@@ -719,9 +737,10 @@ spec:
- networks
type: object
zone:
- description: zone defines the name of a zone tag that
- will be attached to a vCenter cluster. The tag category
- in vCenter must be named openshift-zone.
+ description: |-
+ zone defines the name of a zone tag that will
+ be attached to a vCenter cluster. The tag
+ category in vCenter must be named openshift-zone.
maxLength: 80
minLength: 1
type: string
@@ -737,15 +756,15 @@ spec:
- name
x-kubernetes-list-type: map
ingressIPs:
- description: ingressIPs are the external IPs which route to
- the default ingress controller. The IPs are suitable targets
- of a wildcard DNS record used to resolve default route host
- names. In dual stack clusters this list contains two IP
- addresses, one from IPv4 family and one from IPv6. In single
- stack clusters a single IP address is expected. When omitted,
- values from the status.ingressIPs will be used. Once set,
- the list cannot be completely removed (but its second entry
- can).
+ description: |-
+ ingressIPs are the external IPs which route to the default ingress
+ controller. The IPs are suitable targets of a wildcard DNS record used to
+ resolve default route host names.
+ In dual stack clusters this list contains two IP addresses, one from IPv4
+ family and one from IPv6.
+ In single stack clusters a single IP address is expected.
+ When omitted, values from the status.ingressIPs will be used.
+ Once set, the list cannot be completely removed (but its second entry can).
items:
description: IP is an IP address (for example, "10.0.0.0"
or "fd00::").
@@ -764,10 +783,10 @@ spec:
rule: 'size(self) == 2 && isIP(self[0]) && isIP(self[1])
? ip(self[0]).family() != ip(self[1]).family() : true'
machineNetworks:
- description: machineNetworks are IP networks used to connect
- all the OpenShift cluster nodes. Each network is provided
- in the CIDR format and should be IPv4 or IPv6, for example
- "10.0.0.0/8" or "fd00::/8".
+ description: |-
+ machineNetworks are IP networks used to connect all the OpenShift cluster
+ nodes. Each network is provided in the CIDR format and should be IPv4 or IPv6,
+ for example "10.0.0.0/8" or "fd00::/8".
items:
description: CIDR is an IP address range in CIDR notation
(for example, "10.0.0.0/8" or "fd00::/8").
@@ -783,41 +802,39 @@ spec:
x-kubernetes-validations:
- rule: self.all(x, self.exists_one(y, x == y))
nodeNetworking:
- description: nodeNetworking contains the definition of internal
- and external network constraints for assigning the node's
- networking. If this field is omitted, networking defaults
- to the legacy address selection behavior which is to only
- support a single address and return the first one found.
+ description: |-
+ nodeNetworking contains the definition of internal and external network constraints for
+ assigning the node's networking.
+ If this field is omitted, networking defaults to the legacy
+ address selection behavior which is to only support a single address and
+ return the first one found.
properties:
external:
description: external represents the network configuration
of the node that is externally routable.
properties:
excludeNetworkSubnetCidr:
- description: excludeNetworkSubnetCidr IP addresses
- in subnet ranges will be excluded when selecting
- the IP address from the VirtualMachine's VM for
- use in the status.addresses fields. ---
+ description: |-
+ excludeNetworkSubnetCidr IP addresses in subnet ranges will be excluded when selecting
+ the IP address from the VirtualMachine's VM for use in the status.addresses fields.
items:
format: cidr
type: string
type: array
x-kubernetes-list-type: atomic
network:
- description: network VirtualMachine's VM Network names
- that will be used to when searching for status.addresses
- fields. Note that if internal.networkSubnetCIDR
- and external.networkSubnetCIDR are not set, then
- the vNIC associated to this network must only have
- a single IP address assigned to it. The available
- networks (port groups) can be listed using `govc
- ls 'network/*'`
+ description: |-
+ network VirtualMachine's VM Network names that will be used to when searching
+ for status.addresses fields. Note that if internal.networkSubnetCIDR and
+ external.networkSubnetCIDR are not set, then the vNIC associated to this network must
+ only have a single IP address assigned to it.
+ The available networks (port groups) can be listed using
+ `govc ls 'network/*'`
type: string
networkSubnetCidr:
- description: networkSubnetCidr IP address on VirtualMachine's
- network interfaces included in the fields' CIDRs
- that will be used in respective status.addresses
- fields. ---
+ description: |-
+ networkSubnetCidr IP address on VirtualMachine's network interfaces included in the fields' CIDRs
+ that will be used in respective status.addresses fields.
items:
format: cidr
type: string
@@ -829,30 +846,27 @@ spec:
of the node that is routable only within the cluster.
properties:
excludeNetworkSubnetCidr:
- description: excludeNetworkSubnetCidr IP addresses
- in subnet ranges will be excluded when selecting
- the IP address from the VirtualMachine's VM for
- use in the status.addresses fields. ---
+ description: |-
+ excludeNetworkSubnetCidr IP addresses in subnet ranges will be excluded when selecting
+ the IP address from the VirtualMachine's VM for use in the status.addresses fields.
items:
format: cidr
type: string
type: array
x-kubernetes-list-type: atomic
network:
- description: network VirtualMachine's VM Network names
- that will be used to when searching for status.addresses
- fields. Note that if internal.networkSubnetCIDR
- and external.networkSubnetCIDR are not set, then
- the vNIC associated to this network must only have
- a single IP address assigned to it. The available
- networks (port groups) can be listed using `govc
- ls 'network/*'`
+ description: |-
+ network VirtualMachine's VM Network names that will be used to when searching
+ for status.addresses fields. Note that if internal.networkSubnetCIDR and
+ external.networkSubnetCIDR are not set, then the vNIC associated to this network must
+ only have a single IP address assigned to it.
+ The available networks (port groups) can be listed using
+ `govc ls 'network/*'`
type: string
networkSubnetCidr:
- description: networkSubnetCidr IP address on VirtualMachine's
- network interfaces included in the fields' CIDRs
- that will be used in respective status.addresses
- fields. ---
+ description: |-
+ networkSubnetCidr IP address on VirtualMachine's network interfaces included in the fields' CIDRs
+ that will be used in respective status.addresses fields.
items:
format: cidr
type: string
@@ -861,36 +875,38 @@ spec:
type: object
type: object
vcenters:
- description: vcenters holds the connection details for services
- to communicate with vCenter. Currently, only a single vCenter
- is supported, but in tech preview 3 vCenters are supported.
- Once the cluster has been installed, you are unable to change
- the current number of defined vCenters except in the case
- where the cluster has been upgraded from a version of OpenShift
- where the vsphere platform spec was not present. You may
- make modifications to the existing vCenters that are defined
- in the vcenters list in order to match with any added or
- modified failure domains. ---
+ description: |-
+ vcenters holds the connection details for services to communicate with vCenter.
+ Currently, only a single vCenter is supported, but in tech preview 3 vCenters are supported.
+ Once the cluster has been installed, you are unable to change the current number of defined
+ vCenters except in the case where the cluster has been upgraded from a version of OpenShift
+ where the vsphere platform spec was not present. You may make modifications to the existing
+ vCenters that are defined in the vcenters list in order to match with any added or modified
+ failure domains.
items:
- description: VSpherePlatformVCenterSpec stores the vCenter
- connection fields. This is used by the vSphere CCM.
+ description: |-
+ VSpherePlatformVCenterSpec stores the vCenter connection fields.
+ This is used by the vSphere CCM.
properties:
datacenters:
- description: The vCenter Datacenters in which the RHCOS
- vm guests are located. This field will be used by
- the Cloud Controller Manager. Each datacenter listed
- here should be used within a topology.
+ description: |-
+ The vCenter Datacenters in which the RHCOS
+ vm guests are located. This field will
+ be used by the Cloud Controller Manager.
+ Each datacenter listed here should be used within
+ a topology.
items:
type: string
minItems: 1
type: array
x-kubernetes-list-type: set
port:
- description: port is the TCP port that will be used
- to communicate to the vCenter endpoint. When omitted,
- this means the user has no opinion and it is up to
- the platform to choose a sensible default, which is
- subject to change over time.
+ description: |-
+ port is the TCP port that will be used to communicate to
+ the vCenter endpoint.
+ When omitted, this means the user has no opinion and
+ it is up to the platform to choose a sensible default,
+ which is subject to change over time.
format: int32
maximum: 32767
minimum: 1
@@ -901,7 +917,7 @@ spec:
- format: ipv6
- format: hostname
description: server is the fully-qualified domain name
- or the IP address of the vCenter server. ---
+ or the IP address of the vCenter server.
maxLength: 255
type: string
required:
@@ -936,28 +952,27 @@ spec:
be overridden.
properties:
apiServerInternalURI:
- description: apiServerInternalURL is a valid URI with scheme 'https',
- address and optionally a port (defaulting to 443). apiServerInternalURL
- can be used by components like kubelets, to contact the Kubernetes
- API server using the infrastructure provider rather than Kubernetes
- networking.
+ description: |-
+ apiServerInternalURL is a valid URI with scheme 'https',
+ address and optionally a port (defaulting to 443). apiServerInternalURL can be used by components
+ like kubelets, to contact the Kubernetes API server using the
+ infrastructure provider rather than Kubernetes networking.
type: string
apiServerURL:
- description: apiServerURL is a valid URI with scheme 'https', address
- and optionally a port (defaulting to 443). apiServerURL can be
- used by components like the web console to tell users where to find
- the Kubernetes API.
+ description: |-
+ apiServerURL is a valid URI with scheme 'https', address and
+ optionally a port (defaulting to 443). apiServerURL can be used by components like the web console
+ to tell users where to find the Kubernetes API.
type: string
controlPlaneTopology:
default: HighlyAvailable
- description: controlPlaneTopology expresses the expectations for operands
- that normally run on control nodes. The default is 'HighlyAvailable',
- which represents the behavior operators have in a "normal" cluster.
+ description: |-
+ controlPlaneTopology expresses the expectations for operands that normally run on control nodes.
+ The default is 'HighlyAvailable', which represents the behavior operators have in a "normal" cluster.
The 'SingleReplica' mode will be used in single-node deployments
- and the operators should not configure the operand for highly-available
- operation The 'External' mode indicates that the control plane is
- hosted externally to the cluster and that its components are not
- visible within the cluster.
+ and the operators should not configure the operand for highly-available operation
+ The 'External' mode indicates that the control plane is hosted externally to the cluster and that
+ its components are not visible within the cluster.
enum:
- HighlyAvailable
- SingleReplica
@@ -965,47 +980,49 @@ spec:
type: string
cpuPartitioning:
default: None
- description: cpuPartitioning expresses if CPU partitioning is a currently
- enabled feature in the cluster. CPU Partitioning means that this
- cluster can support partitioning workloads to specific CPU Sets.
- Valid values are "None" and "AllNodes". When omitted, the default
- value is "None". The default value of "None" indicates that no nodes
- will be setup with CPU partitioning. The "AllNodes" value indicates
- that all nodes have been setup with CPU partitioning, and can then
- be further configured via the PerformanceProfile API.
+ description: |-
+ cpuPartitioning expresses if CPU partitioning is a currently enabled feature in the cluster.
+ CPU Partitioning means that this cluster can support partitioning workloads to specific CPU Sets.
+ Valid values are "None" and "AllNodes". When omitted, the default value is "None".
+ The default value of "None" indicates that no nodes will be setup with CPU partitioning.
+ The "AllNodes" value indicates that all nodes have been setup with CPU partitioning,
+ and can then be further configured via the PerformanceProfile API.
enum:
- None
- AllNodes
type: string
etcdDiscoveryDomain:
- description: 'etcdDiscoveryDomain is the domain used to fetch the
- SRV records for discovering etcd servers and clients. For more info:
- https://github.com/etcd-io/etcd/blob/329be66e8b3f9e2e6af83c123ff89297e49ebd15/Documentation/op-guide/clustering.md#dns-discovery
- deprecated: as of 4.7, this field is no longer set or honored. It
- will be removed in a future release.'
+ description: |-
+ etcdDiscoveryDomain is the domain used to fetch the SRV records for discovering
+ etcd servers and clients.
+ For more info: https://github.com/etcd-io/etcd/blob/329be66e8b3f9e2e6af83c123ff89297e49ebd15/Documentation/op-guide/clustering.md#dns-discovery
+ deprecated: as of 4.7, this field is no longer set or honored. It will be removed in a future release.
type: string
infrastructureName:
- description: infrastructureName uniquely identifies a cluster with
- a human friendly name. Once set it should not be changed. Must be
- of max length 27 and must have only alphanumeric or hyphen characters.
+ description: |-
+ infrastructureName uniquely identifies a cluster with a human friendly name.
+ Once set it should not be changed. Must be of max length 27 and must have only
+ alphanumeric or hyphen characters.
type: string
infrastructureTopology:
default: HighlyAvailable
- description: 'infrastructureTopology expresses the expectations for
- infrastructure services that do not run on control plane nodes,
- usually indicated by a node selector for a `role` value other than
- `master`. The default is ''HighlyAvailable'', which represents the
- behavior operators have in a "normal" cluster. The ''SingleReplica''
- mode will be used in single-node deployments and the operators should
- not configure the operand for highly-available operation NOTE: External
- topology mode is not applicable for this field.'
+ description: |-
+ infrastructureTopology expresses the expectations for infrastructure services that do not run on control
+ plane nodes, usually indicated by a node selector for a `role` value
+ other than `master`.
+ The default is 'HighlyAvailable', which represents the behavior operators have in a "normal" cluster.
+ The 'SingleReplica' mode will be used in single-node deployments
+ and the operators should not configure the operand for highly-available operation
+ NOTE: External topology mode is not applicable for this field.
enum:
- HighlyAvailable
- SingleReplica
type: string
platform:
- description: "platform is the underlying infrastructure provider for
- the cluster. \n Deprecated: Use platformStatus.type instead."
+ description: |-
+ platform is the underlying infrastructure provider for the cluster.
+
+ Deprecated: Use platformStatus.type instead.
enum:
- ""
- AWS
@@ -1026,8 +1043,9 @@ spec:
- External
type: string
platformStatus:
- description: platformStatus holds status information specific to the
- underlying infrastructure provider.
+ description: |-
+ platformStatus holds status information specific to the underlying
+ infrastructure provider.
properties:
alibabaCloud:
description: AlibabaCloud contains settings specific to the Alibaba
@@ -1076,16 +1094,120 @@ spec:
description: AWS contains settings specific to the Amazon Web
Services infrastructure provider.
properties:
+ cloudLoadBalancerConfig:
+ default:
+ dnsType: PlatformDefault
+ description: |-
+ cloudLoadBalancerConfig holds configuration related to DNS and cloud
+ load balancers. It allows configuration of in-cluster DNS as an alternative
+ to the platform default DNS implementation.
+ When using the ClusterHosted DNS type, Load Balancer IP addresses
+ must be provided for the API and internal API load balancers as well as the
+ ingress load balancer.
+ nullable: true
+ properties:
+ clusterHosted:
+ description: |-
+ clusterHosted holds the IP addresses of API, API-Int and Ingress Load
+ Balancers on Cloud Platforms. The DNS solution hosted within the cluster
+ use these IP addresses to provide resolution for API, API-Int and Ingress
+ services.
+ properties:
+ apiIntLoadBalancerIPs:
+ description: |-
+ apiIntLoadBalancerIPs holds Load Balancer IPs for the internal API service.
+ These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses.
+ Entries in the apiIntLoadBalancerIPs must be unique.
+ A maximum of 16 IP addresses are permitted.
+ format: ip
+ items:
+ description: IP is an IP address (for example, "10.0.0.0"
+ or "fd00::").
+ maxLength: 39
+ minLength: 1
+ type: string
+ x-kubernetes-validations:
+ - message: value must be a valid IP address
+ rule: isIP(self)
+ maxItems: 16
+ type: array
+ x-kubernetes-list-type: set
+ apiLoadBalancerIPs:
+ description: |-
+ apiLoadBalancerIPs holds Load Balancer IPs for the API service.
+ These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses.
+ Could be empty for private clusters.
+ Entries in the apiLoadBalancerIPs must be unique.
+ A maximum of 16 IP addresses are permitted.
+ format: ip
+ items:
+ description: IP is an IP address (for example, "10.0.0.0"
+ or "fd00::").
+ maxLength: 39
+ minLength: 1
+ type: string
+ x-kubernetes-validations:
+ - message: value must be a valid IP address
+ rule: isIP(self)
+ maxItems: 16
+ type: array
+ x-kubernetes-list-type: set
+ ingressLoadBalancerIPs:
+ description: |-
+ ingressLoadBalancerIPs holds IPs for Ingress Load Balancers.
+ These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses.
+ Entries in the ingressLoadBalancerIPs must be unique.
+ A maximum of 16 IP addresses are permitted.
+ format: ip
+ items:
+ description: IP is an IP address (for example, "10.0.0.0"
+ or "fd00::").
+ maxLength: 39
+ minLength: 1
+ type: string
+ x-kubernetes-validations:
+ - message: value must be a valid IP address
+ rule: isIP(self)
+ maxItems: 16
+ type: array
+ x-kubernetes-list-type: set
+ type: object
+ dnsType:
+ default: PlatformDefault
+ description: |-
+ dnsType indicates the type of DNS solution in use within the cluster. Its default value of
+ `PlatformDefault` indicates that the cluster's DNS is the default provided by the cloud platform.
+ It can be set to `ClusterHosted` to bypass the configuration of the cloud default DNS. In this mode,
+ the cluster needs to provide a self-hosted DNS solution for the cluster's installation to succeed.
+ The cluster's use of the cloud's Load Balancers is unaffected by this setting.
+ The value is immutable after it has been set at install time.
+ Currently, there is no way for the customer to add additional DNS entries into the cluster hosted DNS.
+ Enabling this functionality allows the user to start their own DNS solution outside the cluster after
+ installation is complete. The customer would be responsible for configuring this custom DNS solution,
+ and it can be run in addition to the in-cluster DNS solution.
+ enum:
+ - ClusterHosted
+ - PlatformDefault
+ type: string
+ x-kubernetes-validations:
+ - message: dnsType is immutable
+ rule: oldSelf == '' || self == oldSelf
+ type: object
+ x-kubernetes-validations:
+ - message: clusterHosted is permitted only when dnsType is
+ ClusterHosted
+ rule: 'has(self.dnsType) && self.dnsType != ''ClusterHosted''
+ ? !has(self.clusterHosted) : true'
region:
description: region holds the default AWS region for new AWS
resources created by the cluster.
type: string
resourceTags:
- description: resourceTags is a list of additional tags to
- apply to AWS resources created for the cluster. See https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html
- for information on tagging AWS resources. AWS supports a
- maximum of 50 tags per resource. OpenShift reserves 25 tags
- for its use, leaving 25 tags available for the user.
+ description: |-
+ resourceTags is a list of additional tags to apply to AWS resources created for the cluster.
+ See https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html for information on tagging AWS resources.
+ AWS supports a maximum of 50 tags per resource. OpenShift reserves 25 tags for its use, leaving 25 tags
+ available for the user.
items:
description: AWSResourceTag is a tag to apply to AWS resources
created for the cluster.
@@ -1097,10 +1219,10 @@ spec:
pattern: ^[0-9A-Za-z_.:/=+-@]+$
type: string
value:
- description: value is the value of the tag. Some AWS
- service do not support empty values. Since tags are
- added to resources in many services, the length of
- the tag value must meet the requirements of all services.
+ description: |-
+ value is the value of the tag.
+ Some AWS service do not support empty values. Since tags are added to resources in many services, the
+ length of the tag value must meet the requirements of all services.
maxLength: 256
minLength: 1
pattern: ^[0-9A-Za-z_.:/=+-@]+$
@@ -1113,24 +1235,27 @@ spec:
type: array
x-kubernetes-list-type: atomic
serviceEndpoints:
- description: ServiceEndpoints list contains custom endpoints
- which will override default service endpoint of AWS Services.
+ description: |-
+ ServiceEndpoints list contains custom endpoints which will override default
+ service endpoint of AWS Services.
There must be only one ServiceEndpoint for a service.
items:
- description: AWSServiceEndpoint store the configuration
- of a custom url to override existing defaults of AWS Services.
+ description: |-
+ AWSServiceEndpoint store the configuration of a custom url to
+ override existing defaults of AWS Services.
properties:
name:
- description: name is the name of the AWS service. The
- list of all the service names can be found at https://docs.aws.amazon.com/general/latest/gr/aws-service-information.html
+ description: |-
+ name is the name of the AWS service.
+ The list of all the service names can be found at https://docs.aws.amazon.com/general/latest/gr/aws-service-information.html
This must be provided and cannot be empty.
pattern: ^[a-z0-9-]+$
type: string
url:
- description: url is fully qualified URI with scheme
- https, that overrides the default generated endpoint
- for a client. This must be provided and cannot be
- empty.
+ description: |-
+ url is fully qualified URI with scheme https, that overrides the default generated
+ endpoint for a client.
+ This must be provided and cannot be empty.
pattern: ^https://
type: string
type: object
@@ -1146,9 +1271,10 @@ spec:
management in non-soverign clouds such as Azure Stack.
type: string
cloudName:
- description: cloudName is the name of the Azure cloud environment
- which can be used to configure the Azure SDK with the appropriate
- Azure API endpoints. If empty, the value is equal to `AzurePublicCloud`.
+ description: |-
+ cloudName is the name of the Azure cloud environment which can be used to configure the Azure SDK
+ with the appropriate Azure API endpoints.
+ If empty, the value is equal to `AzurePublicCloud`.
enum:
- ""
- AzurePublicCloud
@@ -1158,42 +1284,37 @@ spec:
- AzureStackCloud
type: string
networkResourceGroupName:
- description: networkResourceGroupName is the Resource Group
- for network resources like the Virtual Network and Subnets
- used by the cluster. If empty, the value is same as ResourceGroupName.
+ description: |-
+ networkResourceGroupName is the Resource Group for network resources like the Virtual Network and Subnets used by the cluster.
+ If empty, the value is same as ResourceGroupName.
type: string
resourceGroupName:
description: resourceGroupName is the Resource Group for new
Azure resources created for the cluster.
type: string
resourceTags:
- description: resourceTags is a list of additional tags to
- apply to Azure resources created for the cluster. See https://docs.microsoft.com/en-us/rest/api/resources/tags
- for information on tagging Azure resources. Due to limitations
- on Automation, Content Delivery Network, DNS Azure resources,
- a maximum of 15 tags may be applied. OpenShift reserves
- 5 tags for internal use, allowing 10 tags for user configuration.
+ description: |-
+ resourceTags is a list of additional tags to apply to Azure resources created for the cluster.
+ See https://docs.microsoft.com/en-us/rest/api/resources/tags for information on tagging Azure resources.
+ Due to limitations on Automation, Content Delivery Network, DNS Azure resources, a maximum of 15 tags
+ may be applied. OpenShift reserves 5 tags for internal use, allowing 10 tags for user configuration.
items:
description: AzureResourceTag is a tag to apply to Azure
resources created for the cluster.
properties:
key:
- description: key is the key part of the tag. A tag key
- can have a maximum of 128 characters and cannot be
- empty. Key must begin with a letter, end with a letter,
- number or underscore, and must contain only alphanumeric
- characters and the following special characters `_
- . -`.
+ description: |-
+ key is the key part of the tag. A tag key can have a maximum of 128 characters and cannot be empty. Key
+ must begin with a letter, end with a letter, number or underscore, and must contain only alphanumeric
+ characters and the following special characters `_ . -`.
maxLength: 128
minLength: 1
pattern: ^[a-zA-Z]([0-9A-Za-z_.-]*[0-9A-Za-z_])?$
type: string
value:
- description: 'value is the value part of the tag. A
- tag value can have a maximum of 256 characters and
- cannot be empty. Value must contain only alphanumeric
- characters and the following special characters `_
- + , - . / : ; < = > ? @`.'
+ description: |-
+ value is the value part of the tag. A tag value can have a maximum of 256 characters and cannot be empty. Value
+ must contain only alphanumeric characters and the following special characters `_ + , - . / : ; < = > ? @`.
maxLength: 256
minLength: 1
pattern: ^[0-9A-Za-z_.=+-@]+$
@@ -1219,22 +1340,21 @@ spec:
platform.
properties:
apiServerInternalIP:
- description: "apiServerInternalIP is an IP address to contact
- the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. It is the IP that the
- Infrastructure.status.apiServerInternalURI points to. It
- is the IP for a self-hosted load balancer in front of the
- API servers. \n Deprecated: Use APIServerInternalIPs instead."
+ description: |-
+ apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used
+ by components inside the cluster, like kubelets using the infrastructure rather
+ than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI
+ points to. It is the IP for a self-hosted load balancer in front of the API servers.
+
+ Deprecated: Use APIServerInternalIPs instead.
type: string
apiServerInternalIPs:
- description: apiServerInternalIPs are the IP addresses to
- contact the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. These are the IPs for
- a self-hosted load balancer in front of the API servers.
- In dual stack clusters this list contains two IPs otherwise
- only one.
+ description: |-
+ apiServerInternalIPs are the IP addresses to contact the Kubernetes API
+ server that can be used by components inside the cluster, like kubelets
+ using the infrastructure rather than Kubernetes networking. These are the
+ IPs for a self-hosted load balancer in front of the API servers. In dual
+ stack clusters this list contains two IPs otherwise only one.
format: ip
items:
type: string
@@ -1248,17 +1368,18 @@ spec:
&& isIP(self[1]) ? ip(self[0]).family() != ip(self[1]).family()
: true)'
ingressIP:
- description: "ingressIP is an external IP which routes to
- the default ingress controller. The IP is a suitable target
- of a wildcard DNS record used to resolve default route host
- names. \n Deprecated: Use IngressIPs instead."
+ description: |-
+ ingressIP is an external IP which routes to the default ingress controller.
+ The IP is a suitable target of a wildcard DNS record used to resolve default route host names.
+
+ Deprecated: Use IngressIPs instead.
type: string
ingressIPs:
- description: ingressIPs are the external IPs which route to
- the default ingress controller. The IPs are suitable targets
- of a wildcard DNS record used to resolve default route host
- names. In dual stack clusters this list contains two IPs
- otherwise only one.
+ description: |-
+ ingressIPs are the external IPs which route to the default ingress
+ controller. The IPs are suitable targets of a wildcard DNS record used to
+ resolve default route host names. In dual stack clusters this list
+ contains two IPs otherwise only one.
format: ip
items:
type: string
@@ -1279,18 +1400,16 @@ spec:
properties:
type:
default: OpenShiftManagedDefault
- description: type defines the type of load balancer used
- by the cluster on BareMetal platform which can be a
- user-managed or openshift-managed load balancer that
- is to be used for the OpenShift API and Ingress endpoints.
- When set to OpenShiftManagedDefault the static pods
- in charge of API and Ingress traffic load-balancing
+ description: |-
+ type defines the type of load balancer used by the cluster on BareMetal platform
+ which can be a user-managed or openshift-managed load balancer
+ that is to be used for the OpenShift API and Ingress endpoints.
+ When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing
defined in the machine config operator will be deployed.
- When set to UserManaged these static pods will not be
- deployed and it is expected that the load balancer is
- configured out of band by the deployer. When omitted,
- this means no opinion and the platform is left to choose
- a reasonable default. The default value is OpenShiftManagedDefault.
+ When set to UserManaged these static pods will not be deployed and it is expected that
+ the load balancer is configured out of band by the deployer.
+ When omitted, this means no opinion and the platform is left to choose a reasonable default.
+ The default value is OpenShiftManagedDefault.
enum:
- OpenShiftManagedDefault
- UserManaged
@@ -1317,13 +1436,13 @@ spec:
x-kubernetes-validations:
- rule: self.all(x, self.exists_one(y, x == y))
nodeDNSIP:
- description: nodeDNSIP is the IP address for the internal
- DNS used by the nodes. Unlike the one managed by the DNS
- operator, `NodeDNSIP` provides name resolution for the nodes
- themselves. There is no DNS-as-a-service for BareMetal deployments.
- In order to minimize necessary changes to the datacenter
- DNS, a DNS service is hosted as a static pod to serve those
- hostnames to the nodes in the cluster.
+ description: |-
+ nodeDNSIP is the IP address for the internal DNS used by the
+ nodes. Unlike the one managed by the DNS operator, `NodeDNSIP`
+ provides name resolution for the nodes themselves. There is no DNS-as-a-service for
+ BareMetal deployments. In order to minimize necessary changes to the
+ datacenter DNS, a DNS service is hosted as a static pod to serve those hostnames
+ to the nodes in the cluster.
type: string
type: object
equinixMetal:
@@ -1331,19 +1450,16 @@ spec:
Metal infrastructure provider.
properties:
apiServerInternalIP:
- description: apiServerInternalIP is an IP address to contact
- the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. It is the IP that the
- Infrastructure.status.apiServerInternalURI points to. It
- is the IP for a self-hosted load balancer in front of the
- API servers.
+ description: |-
+ apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used
+ by components inside the cluster, like kubelets using the infrastructure rather
+ than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI
+ points to. It is the IP for a self-hosted load balancer in front of the API servers.
type: string
ingressIP:
- description: ingressIP is an external IP which routes to the
- default ingress controller. The IP is a suitable target
- of a wildcard DNS record used to resolve default route host
- names.
+ description: |-
+ ingressIP is an external IP which routes to the default ingress controller.
+ The IP is a suitable target of a wildcard DNS record used to resolve default route host names.
type: string
type: object
external:
@@ -1351,23 +1467,22 @@ spec:
External infrastructure provider.
properties:
cloudControllerManager:
- description: cloudControllerManager contains settings specific
- to the external Cloud Controller Manager (a.k.a. CCM or
- CPI). When omitted, new nodes will be not tainted and no
- extra initialization from the cloud controller manager is
- expected.
+ description: |-
+ cloudControllerManager contains settings specific to the external Cloud Controller Manager (a.k.a. CCM or CPI).
+ When omitted, new nodes will be not tainted
+ and no extra initialization from the cloud controller manager is expected.
properties:
state:
- description: "state determines whether or not an external
- Cloud Controller Manager is expected to be installed
- within the cluster. https://kubernetes.io/docs/tasks/administer-cluster/running-cloud-controller/#running-cloud-controller-manager
- \n Valid values are \"External\", \"None\" and omitted.
- When set to \"External\", new nodes will be tainted
- as uninitialized when created, preventing them from
- running workloads until they are initialized by the
- cloud controller manager. When omitted or set to \"None\",
- new nodes will be not tainted and no extra initialization
- from the cloud controller manager is expected."
+ description: |-
+ state determines whether or not an external Cloud Controller Manager is expected to
+ be installed within the cluster.
+ https://kubernetes.io/docs/tasks/administer-cluster/running-cloud-controller/#running-cloud-controller-manager
+
+ Valid values are "External", "None" and omitted.
+ When set to "External", new nodes will be tainted as uninitialized when created,
+ preventing them from running workloads until they are initialized by the cloud controller manager.
+ When omitted or set to "None", new nodes will be not tainted
+ and no extra initialization from the cloud controller manager is expected.
enum:
- ""
- External
@@ -1393,27 +1508,26 @@ spec:
cloudLoadBalancerConfig:
default:
dnsType: PlatformDefault
- description: cloudLoadBalancerConfig is a union that contains
- the IP addresses of API, API-Int and Ingress Load Balancers
- created on the cloud platform. These values would not be
- populated on on-prem platforms. These Load Balancer IPs
- are used to configure the in-cluster DNS instances for API,
- API-Int and Ingress services. `dnsType` is expected to be
- set to `ClusterHosted` when these Load Balancer IP addresses
- are populated and used.
+ description: |-
+ cloudLoadBalancerConfig holds configuration related to DNS and cloud
+ load balancers. It allows configuration of in-cluster DNS as an alternative
+ to the platform default DNS implementation.
+ When using the ClusterHosted DNS type, Load Balancer IP addresses
+ must be provided for the API and internal API load balancers as well as the
+ ingress load balancer.
nullable: true
properties:
clusterHosted:
- description: clusterHosted holds the IP addresses of API,
- API-Int and Ingress Load Balancers on Cloud Platforms.
- The DNS solution hosted within the cluster use these
- IP addresses to provide resolution for API, API-Int
- and Ingress services.
+ description: |-
+ clusterHosted holds the IP addresses of API, API-Int and Ingress Load
+ Balancers on Cloud Platforms. The DNS solution hosted within the cluster
+ use these IP addresses to provide resolution for API, API-Int and Ingress
+ services.
properties:
apiIntLoadBalancerIPs:
- description: apiIntLoadBalancerIPs holds Load Balancer
- IPs for the internal API service. These Load Balancer
- IP addresses can be IPv4 and/or IPv6 addresses.
+ description: |-
+ apiIntLoadBalancerIPs holds Load Balancer IPs for the internal API service.
+ These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses.
Entries in the apiIntLoadBalancerIPs must be unique.
A maximum of 16 IP addresses are permitted.
format: ip
@@ -1430,12 +1544,12 @@ spec:
type: array
x-kubernetes-list-type: set
apiLoadBalancerIPs:
- description: apiLoadBalancerIPs holds Load Balancer
- IPs for the API service. These Load Balancer IP
- addresses can be IPv4 and/or IPv6 addresses. Could
- be empty for private clusters. Entries in the apiLoadBalancerIPs
- must be unique. A maximum of 16 IP addresses are
- permitted.
+ description: |-
+ apiLoadBalancerIPs holds Load Balancer IPs for the API service.
+ These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses.
+ Could be empty for private clusters.
+ Entries in the apiLoadBalancerIPs must be unique.
+ A maximum of 16 IP addresses are permitted.
format: ip
items:
description: IP is an IP address (for example, "10.0.0.0"
@@ -1450,11 +1564,11 @@ spec:
type: array
x-kubernetes-list-type: set
ingressLoadBalancerIPs:
- description: ingressLoadBalancerIPs holds IPs for
- Ingress Load Balancers. These Load Balancer IP addresses
- can be IPv4 and/or IPv6 addresses. Entries in the
- ingressLoadBalancerIPs must be unique. A maximum
- of 16 IP addresses are permitted.
+ description: |-
+ ingressLoadBalancerIPs holds IPs for Ingress Load Balancers.
+ These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses.
+ Entries in the ingressLoadBalancerIPs must be unique.
+ A maximum of 16 IP addresses are permitted.
format: ip
items:
description: IP is an IP address (for example, "10.0.0.0"
@@ -1471,23 +1585,17 @@ spec:
type: object
dnsType:
default: PlatformDefault
- description: dnsType indicates the type of DNS solution
- in use within the cluster. Its default value of `PlatformDefault`
- indicates that the cluster's DNS is the default provided
- by the cloud platform. It can be set to `ClusterHosted`
- to bypass the configuration of the cloud default DNS.
- In this mode, the cluster needs to provide a self-hosted
- DNS solution for the cluster's installation to succeed.
- The cluster's use of the cloud's Load Balancers is unaffected
- by this setting. The value is immutable after it has
- been set at install time. Currently, there is no way
- for the customer to add additional DNS entries into
- the cluster hosted DNS. Enabling this functionality
- allows the user to start their own DNS solution outside
- the cluster after installation is complete. The customer
- would be responsible for configuring this custom DNS
- solution, and it can be run in addition to the in-cluster
- DNS solution.
+ description: |-
+ dnsType indicates the type of DNS solution in use within the cluster. Its default value of
+ `PlatformDefault` indicates that the cluster's DNS is the default provided by the cloud platform.
+ It can be set to `ClusterHosted` to bypass the configuration of the cloud default DNS. In this mode,
+ the cluster needs to provide a self-hosted DNS solution for the cluster's installation to succeed.
+ The cluster's use of the cloud's Load Balancers is unaffected by this setting.
+ The value is immutable after it has been set at install time.
+ Currently, there is no way for the customer to add additional DNS entries into the cluster hosted DNS.
+ Enabling this functionality allows the user to start their own DNS solution outside the cluster after
+ installation is complete. The customer would be responsible for configuring this custom DNS solution,
+ and it can be run in addition to the in-cluster DNS solution.
enum:
- ClusterHosted
- PlatformDefault
@@ -1510,23 +1618,20 @@ spec:
created for the cluster.
type: string
resourceLabels:
- description: resourceLabels is a list of additional labels
- to apply to GCP resources created for the cluster. See https://cloud.google.com/compute/docs/labeling-resources
- for information on labeling GCP resources. GCP supports
- a maximum of 64 labels per resource. OpenShift reserves
- 32 labels for internal use, allowing 32 labels for user
- configuration.
+ description: |-
+ resourceLabels is a list of additional labels to apply to GCP resources created for the cluster.
+ See https://cloud.google.com/compute/docs/labeling-resources for information on labeling GCP resources.
+ GCP supports a maximum of 64 labels per resource. OpenShift reserves 32 labels for internal use,
+ allowing 32 labels for user configuration.
items:
description: GCPResourceLabel is a label to apply to GCP
resources created for the cluster.
properties:
key:
- description: key is the key part of the label. A label
- key can have a maximum of 63 characters and cannot
- be empty. Label key must begin with a lowercase letter,
- and must contain only lowercase letters, numeric characters,
- and the following special characters `_-`. Label key
- must not have the reserved prefixes `kubernetes-io`
+ description: |-
+ key is the key part of the label. A label key can have a maximum of 63 characters and cannot be empty.
+ Label key must begin with a lowercase letter, and must contain only lowercase letters, numeric characters,
+ and the following special characters `_-`. Label key must not have the reserved prefixes `kubernetes-io`
and `openshift-io`.
maxLength: 63
minLength: 1
@@ -1537,11 +1642,9 @@ spec:
or `kubernetes-io`
rule: '!self.startsWith(''openshift-io'') && !self.startsWith(''kubernetes-io'')'
value:
- description: value is the value part of the label. A
- label value can have a maximum of 63 characters and
- cannot be empty. Value must contain only lowercase
- letters, numeric characters, and the following special
- characters `_-`.
+ description: |-
+ value is the value part of the label. A label value can have a maximum of 63 characters and cannot be empty.
+ Value must contain only lowercase letters, numeric characters, and the following special characters `_-`.
maxLength: 63
minLength: 1
pattern: ^[0-9a-z_-]{1,63}$
@@ -1560,47 +1663,41 @@ spec:
during installation
rule: self.all(x, x in oldSelf) && oldSelf.all(x, x in self)
resourceTags:
- description: resourceTags is a list of additional tags to
- apply to GCP resources created for the cluster. See https://cloud.google.com/resource-manager/docs/tags/tags-overview
- for information on tagging GCP resources. GCP supports a
- maximum of 50 tags per resource.
+ description: |-
+ resourceTags is a list of additional tags to apply to GCP resources created for the cluster.
+ See https://cloud.google.com/resource-manager/docs/tags/tags-overview for information on
+ tagging GCP resources. GCP supports a maximum of 50 tags per resource.
items:
description: GCPResourceTag is a tag to apply to GCP resources
created for the cluster.
properties:
key:
- description: key is the key part of the tag. A tag key
- can have a maximum of 63 characters and cannot be
- empty. Tag key must begin and end with an alphanumeric
- character, and must contain only uppercase, lowercase
- alphanumeric characters, and the following special
- characters `._-`.
+ description: |-
+ key is the key part of the tag. A tag key can have a maximum of 63 characters and cannot be empty.
+ Tag key must begin and end with an alphanumeric character, and must contain only uppercase, lowercase
+ alphanumeric characters, and the following special characters `._-`.
maxLength: 63
minLength: 1
pattern: ^[a-zA-Z0-9]([0-9A-Za-z_.-]{0,61}[a-zA-Z0-9])?$
type: string
parentID:
- description: 'parentID is the ID of the hierarchical
- resource where the tags are defined, e.g. at the Organization
- or the Project level. To find the Organization or
- Project ID refer to the following pages: https://cloud.google.com/resource-manager/docs/creating-managing-organization#retrieving_your_organization_id,
+ description: |-
+ parentID is the ID of the hierarchical resource where the tags are defined,
+ e.g. at the Organization or the Project level. To find the Organization or Project ID refer to the following pages:
+ https://cloud.google.com/resource-manager/docs/creating-managing-organization#retrieving_your_organization_id,
https://cloud.google.com/resource-manager/docs/creating-managing-projects#identifying_projects.
- An OrganizationID must consist of decimal numbers,
- and cannot have leading zeroes. A ProjectID must be
- 6 to 30 characters in length, can only contain lowercase
- letters, numbers, and hyphens, and must start with
- a letter, and cannot end with a hyphen.'
+ An OrganizationID must consist of decimal numbers, and cannot have leading zeroes.
+ A ProjectID must be 6 to 30 characters in length, can only contain lowercase letters, numbers,
+ and hyphens, and must start with a letter, and cannot end with a hyphen.
maxLength: 32
minLength: 1
pattern: (^[1-9][0-9]{0,31}$)|(^[a-z][a-z0-9-]{4,28}[a-z0-9]$)
type: string
value:
- description: value is the value part of the tag. A tag
- value can have a maximum of 63 characters and cannot
- be empty. Tag value must begin and end with an alphanumeric
- character, and must contain only uppercase, lowercase
- alphanumeric characters, and the following special
- characters `_-.@%=+:,*#&(){}[]` and spaces.
+ description: |-
+ value is the value part of the tag. A tag value can have a maximum of 63 characters and cannot be empty.
+ Tag value must begin and end with an alphanumeric character, and must contain only uppercase, lowercase
+ alphanumeric characters, and the following special characters `_-.@%=+:,*#&(){}[]` and spaces.
maxLength: 63
minLength: 1
pattern: ^[a-zA-Z0-9]([0-9A-Za-z_.@%=+:,*#&()\[\]{}\-\s]{0,61}[a-zA-Z0-9])?$
@@ -1632,13 +1729,14 @@ spec:
infrastructure provider.
properties:
cisInstanceCRN:
- description: CISInstanceCRN is the CRN of the Cloud Internet
- Services instance managing the DNS zone for the cluster's
- base domain
+ description: |-
+ CISInstanceCRN is the CRN of the Cloud Internet Services instance managing
+ the DNS zone for the cluster's base domain
type: string
dnsInstanceCRN:
- description: DNSInstanceCRN is the CRN of the DNS Services
- instance managing the DNS zone for the cluster's base domain
+ description: |-
+ DNSInstanceCRN is the CRN of the DNS Services instance managing the DNS zone
+ for the cluster's base domain
type: string
location:
description: Location is where the cluster has been deployed
@@ -1652,26 +1750,23 @@ spec:
IBMCloud resources created for the cluster.
type: string
serviceEndpoints:
- description: serviceEndpoints is a list of custom endpoints
- which will override the default service endpoints of an
- IBM Cloud service. These endpoints are consumed by components
- within the cluster to reach the respective IBM Cloud Services.
+ description: |-
+ serviceEndpoints is a list of custom endpoints which will override the default
+ service endpoints of an IBM Cloud service. These endpoints are consumed by
+ components within the cluster to reach the respective IBM Cloud Services.
items:
- description: IBMCloudServiceEndpoint stores the configuration
- of a custom url to override existing defaults of IBM Cloud
- Services.
+ description: |-
+ IBMCloudServiceEndpoint stores the configuration of a custom url to
+ override existing defaults of IBM Cloud Services.
properties:
name:
- description: 'name is the name of the IBM Cloud service.
- Possible values are: CIS, COS, COSConfig, DNSServices,
- GlobalCatalog, GlobalSearch, GlobalTagging, HyperProtect,
- IAM, KeyProtect, ResourceController, ResourceManager,
- or VPC. For example, the IBM Cloud Private IAM service
- could be configured with the service `name` of `IAM`
- and `url` of `https://private.iam.cloud.ibm.com` Whereas
- the IBM Cloud Private VPC service for US South (Dallas)
- could be configured with the service `name` of `VPC`
- and `url` of `https://us.south.private.iaas.cloud.ibm.com`'
+ description: |-
+ name is the name of the IBM Cloud service.
+ Possible values are: CIS, COS, COSConfig, DNSServices, GlobalCatalog, GlobalSearch, GlobalTagging, HyperProtect, IAM, KeyProtect, ResourceController, ResourceManager, or VPC.
+ For example, the IBM Cloud Private IAM service could be configured with the
+ service `name` of `IAM` and `url` of `https://private.iam.cloud.ibm.com`
+ Whereas the IBM Cloud Private VPC service for US South (Dallas) could be configured
+ with the service `name` of `VPC` and `url` of `https://us.south.private.iaas.cloud.ibm.com`
enum:
- CIS
- COS
@@ -1688,10 +1783,10 @@ spec:
- VPC
type: string
url:
- description: url is fully qualified URI with scheme
- https, that overrides the default generated endpoint
- for a client. This must be provided and cannot be
- empty.
+ description: |-
+ url is fully qualified URI with scheme https, that overrides the default generated
+ endpoint for a client.
+ This must be provided and cannot be empty.
type: string
x-kubernetes-validations:
- message: url must be a valid absolute URL
@@ -1710,19 +1805,16 @@ spec:
infrastructure provider.
properties:
apiServerInternalIP:
- description: apiServerInternalIP is an IP address to contact
- the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. It is the IP that the
- Infrastructure.status.apiServerInternalURI points to. It
- is the IP for a self-hosted load balancer in front of the
- API servers.
+ description: |-
+ apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used
+ by components inside the cluster, like kubelets using the infrastructure rather
+ than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI
+ points to. It is the IP for a self-hosted load balancer in front of the API servers.
type: string
ingressIP:
- description: ingressIP is an external IP which routes to the
- default ingress controller. The IP is a suitable target
- of a wildcard DNS record used to resolve default route host
- names.
+ description: |-
+ ingressIP is an external IP which routes to the default ingress controller.
+ The IP is a suitable target of a wildcard DNS record used to resolve default route host names.
type: string
type: object
nutanix:
@@ -1730,22 +1822,21 @@ spec:
infrastructure provider.
properties:
apiServerInternalIP:
- description: "apiServerInternalIP is an IP address to contact
- the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. It is the IP that the
- Infrastructure.status.apiServerInternalURI points to. It
- is the IP for a self-hosted load balancer in front of the
- API servers. \n Deprecated: Use APIServerInternalIPs instead."
+ description: |-
+ apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used
+ by components inside the cluster, like kubelets using the infrastructure rather
+ than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI
+ points to. It is the IP for a self-hosted load balancer in front of the API servers.
+
+ Deprecated: Use APIServerInternalIPs instead.
type: string
apiServerInternalIPs:
- description: apiServerInternalIPs are the IP addresses to
- contact the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. These are the IPs for
- a self-hosted load balancer in front of the API servers.
- In dual stack clusters this list contains two IPs otherwise
- only one.
+ description: |-
+ apiServerInternalIPs are the IP addresses to contact the Kubernetes API
+ server that can be used by components inside the cluster, like kubelets
+ using the infrastructure rather than Kubernetes networking. These are the
+ IPs for a self-hosted load balancer in front of the API servers. In dual
+ stack clusters this list contains two IPs otherwise only one.
format: ip
items:
type: string
@@ -1759,17 +1850,18 @@ spec:
&& isIP(self[1]) ? ip(self[0]).family() != ip(self[1]).family()
: true)'
ingressIP:
- description: "ingressIP is an external IP which routes to
- the default ingress controller. The IP is a suitable target
- of a wildcard DNS record used to resolve default route host
- names. \n Deprecated: Use IngressIPs instead."
+ description: |-
+ ingressIP is an external IP which routes to the default ingress controller.
+ The IP is a suitable target of a wildcard DNS record used to resolve default route host names.
+
+ Deprecated: Use IngressIPs instead.
type: string
ingressIPs:
- description: ingressIPs are the external IPs which route to
- the default ingress controller. The IPs are suitable targets
- of a wildcard DNS record used to resolve default route host
- names. In dual stack clusters this list contains two IPs
- otherwise only one.
+ description: |-
+ ingressIPs are the external IPs which route to the default ingress
+ controller. The IPs are suitable targets of a wildcard DNS record used to
+ resolve default route host names. In dual stack clusters this list
+ contains two IPs otherwise only one.
format: ip
items:
type: string
@@ -1790,18 +1882,16 @@ spec:
properties:
type:
default: OpenShiftManagedDefault
- description: type defines the type of load balancer used
- by the cluster on Nutanix platform which can be a user-managed
- or openshift-managed load balancer that is to be used
- for the OpenShift API and Ingress endpoints. When set
- to OpenShiftManagedDefault the static pods in charge
- of API and Ingress traffic load-balancing defined in
- the machine config operator will be deployed. When set
- to UserManaged these static pods will not be deployed
- and it is expected that the load balancer is configured
- out of band by the deployer. When omitted, this means
- no opinion and the platform is left to choose a reasonable
- default. The default value is OpenShiftManagedDefault.
+ description: |-
+ type defines the type of load balancer used by the cluster on Nutanix platform
+ which can be a user-managed or openshift-managed load balancer
+ that is to be used for the OpenShift API and Ingress endpoints.
+ When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing
+ defined in the machine config operator will be deployed.
+ When set to UserManaged these static pods will not be deployed and it is expected that
+ the load balancer is configured out of band by the deployer.
+ When omitted, this means no opinion and the platform is left to choose a reasonable default.
+ The default value is OpenShiftManagedDefault.
enum:
- OpenShiftManagedDefault
- UserManaged
@@ -1816,22 +1906,21 @@ spec:
infrastructure provider.
properties:
apiServerInternalIP:
- description: "apiServerInternalIP is an IP address to contact
- the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. It is the IP that the
- Infrastructure.status.apiServerInternalURI points to. It
- is the IP for a self-hosted load balancer in front of the
- API servers. \n Deprecated: Use APIServerInternalIPs instead."
+ description: |-
+ apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used
+ by components inside the cluster, like kubelets using the infrastructure rather
+ than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI
+ points to. It is the IP for a self-hosted load balancer in front of the API servers.
+
+ Deprecated: Use APIServerInternalIPs instead.
type: string
apiServerInternalIPs:
- description: apiServerInternalIPs are the IP addresses to
- contact the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. These are the IPs for
- a self-hosted load balancer in front of the API servers.
- In dual stack clusters this list contains two IPs otherwise
- only one.
+ description: |-
+ apiServerInternalIPs are the IP addresses to contact the Kubernetes API
+ server that can be used by components inside the cluster, like kubelets
+ using the infrastructure rather than Kubernetes networking. These are the
+ IPs for a self-hosted load balancer in front of the API servers. In dual
+ stack clusters this list contains two IPs otherwise only one.
format: ip
items:
type: string
@@ -1845,21 +1934,23 @@ spec:
&& isIP(self[1]) ? ip(self[0]).family() != ip(self[1]).family()
: true)'
cloudName:
- description: cloudName is the name of the desired OpenStack
- cloud in the client configuration file (`clouds.yaml`).
+ description: |-
+ cloudName is the name of the desired OpenStack cloud in the
+ client configuration file (`clouds.yaml`).
type: string
ingressIP:
- description: "ingressIP is an external IP which routes to
- the default ingress controller. The IP is a suitable target
- of a wildcard DNS record used to resolve default route host
- names. \n Deprecated: Use IngressIPs instead."
+ description: |-
+ ingressIP is an external IP which routes to the default ingress controller.
+ The IP is a suitable target of a wildcard DNS record used to resolve default route host names.
+
+ Deprecated: Use IngressIPs instead.
type: string
ingressIPs:
- description: ingressIPs are the external IPs which route to
- the default ingress controller. The IPs are suitable targets
- of a wildcard DNS record used to resolve default route host
- names. In dual stack clusters this list contains two IPs
- otherwise only one.
+ description: |-
+ ingressIPs are the external IPs which route to the default ingress
+ controller. The IPs are suitable targets of a wildcard DNS record used to
+ resolve default route host names. In dual stack clusters this list
+ contains two IPs otherwise only one.
format: ip
items:
type: string
@@ -1880,18 +1971,16 @@ spec:
properties:
type:
default: OpenShiftManagedDefault
- description: type defines the type of load balancer used
- by the cluster on OpenStack platform which can be a
- user-managed or openshift-managed load balancer that
- is to be used for the OpenShift API and Ingress endpoints.
- When set to OpenShiftManagedDefault the static pods
- in charge of API and Ingress traffic load-balancing
+ description: |-
+ type defines the type of load balancer used by the cluster on OpenStack platform
+ which can be a user-managed or openshift-managed load balancer
+ that is to be used for the OpenShift API and Ingress endpoints.
+ When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing
defined in the machine config operator will be deployed.
- When set to UserManaged these static pods will not be
- deployed and it is expected that the load balancer is
- configured out of band by the deployer. When omitted,
- this means no opinion and the platform is left to choose
- a reasonable default. The default value is OpenShiftManagedDefault.
+ When set to UserManaged these static pods will not be deployed and it is expected that
+ the load balancer is configured out of band by the deployer.
+ When omitted, this means no opinion and the platform is left to choose a reasonable default.
+ The default value is OpenShiftManagedDefault.
enum:
- OpenShiftManagedDefault
- UserManaged
@@ -1918,13 +2007,13 @@ spec:
x-kubernetes-validations:
- rule: self.all(x, self.exists_one(y, x == y))
nodeDNSIP:
- description: nodeDNSIP is the IP address for the internal
- DNS used by the nodes. Unlike the one managed by the DNS
- operator, `NodeDNSIP` provides name resolution for the nodes
- themselves. There is no DNS-as-a-service for OpenStack deployments.
- In order to minimize necessary changes to the datacenter
- DNS, a DNS service is hosted as a static pod to serve those
- hostnames to the nodes in the cluster.
+ description: |-
+ nodeDNSIP is the IP address for the internal DNS used by the
+ nodes. Unlike the one managed by the DNS operator, `NodeDNSIP`
+ provides name resolution for the nodes themselves. There is no DNS-as-a-service for
+ OpenStack deployments. In order to minimize necessary changes to the
+ datacenter DNS, a DNS service is hosted as a static pod to serve those hostnames
+ to the nodes in the cluster.
type: string
type: object
ovirt:
@@ -1932,22 +2021,21 @@ spec:
provider.
properties:
apiServerInternalIP:
- description: "apiServerInternalIP is an IP address to contact
- the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. It is the IP that the
- Infrastructure.status.apiServerInternalURI points to. It
- is the IP for a self-hosted load balancer in front of the
- API servers. \n Deprecated: Use APIServerInternalIPs instead."
+ description: |-
+ apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used
+ by components inside the cluster, like kubelets using the infrastructure rather
+ than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI
+ points to. It is the IP for a self-hosted load balancer in front of the API servers.
+
+ Deprecated: Use APIServerInternalIPs instead.
type: string
apiServerInternalIPs:
- description: apiServerInternalIPs are the IP addresses to
- contact the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. These are the IPs for
- a self-hosted load balancer in front of the API servers.
- In dual stack clusters this list contains two IPs otherwise
- only one.
+ description: |-
+ apiServerInternalIPs are the IP addresses to contact the Kubernetes API
+ server that can be used by components inside the cluster, like kubelets
+ using the infrastructure rather than Kubernetes networking. These are the
+ IPs for a self-hosted load balancer in front of the API servers. In dual
+ stack clusters this list contains two IPs otherwise only one.
format: ip
items:
type: string
@@ -1961,17 +2049,18 @@ spec:
&& isIP(self[1]) ? ip(self[0]).family() != ip(self[1]).family()
: true)'
ingressIP:
- description: "ingressIP is an external IP which routes to
- the default ingress controller. The IP is a suitable target
- of a wildcard DNS record used to resolve default route host
- names. \n Deprecated: Use IngressIPs instead."
+ description: |-
+ ingressIP is an external IP which routes to the default ingress controller.
+ The IP is a suitable target of a wildcard DNS record used to resolve default route host names.
+
+ Deprecated: Use IngressIPs instead.
type: string
ingressIPs:
- description: ingressIPs are the external IPs which route to
- the default ingress controller. The IPs are suitable targets
- of a wildcard DNS record used to resolve default route host
- names. In dual stack clusters this list contains two IPs
- otherwise only one.
+ description: |-
+ ingressIPs are the external IPs which route to the default ingress
+ controller. The IPs are suitable targets of a wildcard DNS record used to
+ resolve default route host names. In dual stack clusters this list
+ contains two IPs otherwise only one.
format: ip
items:
type: string
@@ -1992,18 +2081,16 @@ spec:
properties:
type:
default: OpenShiftManagedDefault
- description: type defines the type of load balancer used
- by the cluster on Ovirt platform which can be a user-managed
- or openshift-managed load balancer that is to be used
- for the OpenShift API and Ingress endpoints. When set
- to OpenShiftManagedDefault the static pods in charge
- of API and Ingress traffic load-balancing defined in
- the machine config operator will be deployed. When set
- to UserManaged these static pods will not be deployed
- and it is expected that the load balancer is configured
- out of band by the deployer. When omitted, this means
- no opinion and the platform is left to choose a reasonable
- default. The default value is OpenShiftManagedDefault.
+ description: |-
+ type defines the type of load balancer used by the cluster on Ovirt platform
+ which can be a user-managed or openshift-managed load balancer
+ that is to be used for the OpenShift API and Ingress endpoints.
+ When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing
+ defined in the machine config operator will be deployed.
+ When set to UserManaged these static pods will not be deployed and it is expected that
+ the load balancer is configured out of band by the deployer.
+ When omitted, this means no opinion and the platform is left to choose a reasonable default.
+ The default value is OpenShiftManagedDefault.
enum:
- OpenShiftManagedDefault
- UserManaged
@@ -2022,27 +2109,26 @@ spec:
Virtual Servers infrastructure provider.
properties:
cisInstanceCRN:
- description: CISInstanceCRN is the CRN of the Cloud Internet
- Services instance managing the DNS zone for the cluster's
- base domain
+ description: |-
+ CISInstanceCRN is the CRN of the Cloud Internet Services instance managing
+ the DNS zone for the cluster's base domain
type: string
dnsInstanceCRN:
- description: DNSInstanceCRN is the CRN of the DNS Services
- instance managing the DNS zone for the cluster's base domain
+ description: |-
+ DNSInstanceCRN is the CRN of the DNS Services instance managing the DNS zone
+ for the cluster's base domain
type: string
region:
description: region holds the default Power VS region for
new Power VS resources created by the cluster.
type: string
resourceGroup:
- description: 'resourceGroup is the resource group name for
- new IBMCloud resources created for a cluster. The resource
- group specified here will be used by cluster-image-registry-operator
- to set up a COS Instance in IBMCloud for the cluster registry.
+ description: |-
+ resourceGroup is the resource group name for new IBMCloud resources created for a cluster.
+ The resource group specified here will be used by cluster-image-registry-operator to set up a COS Instance in IBMCloud for the cluster registry.
More about resource groups can be found here: https://cloud.ibm.com/docs/account?topic=account-rgs.
- When omitted, the image registry operator won''t be able
- to configure storage, which results in the image registry
- cluster operator not being in an available state.'
+ When omitted, the image registry operator won't be able to configure storage,
+ which results in the image registry cluster operator not being in an available state.
maxLength: 40
pattern: ^[a-zA-Z0-9-_ ]+$
type: string
@@ -2050,26 +2136,42 @@ spec:
- message: resourceGroup is immutable once set
rule: oldSelf == '' || self == oldSelf
serviceEndpoints:
- description: serviceEndpoints is a list of custom endpoints
- which will override the default service endpoints of a Power
- VS service.
+ description: |-
+ serviceEndpoints is a list of custom endpoints which will override the default
+ service endpoints of a Power VS service.
items:
- description: PowervsServiceEndpoint stores the configuration
- of a custom url to override existing defaults of PowerVS
- Services.
+ description: |-
+ PowervsServiceEndpoint stores the configuration of a custom url to
+ override existing defaults of PowerVS Services.
properties:
name:
- description: name is the name of the Power VS service.
- Few of the services are IAM - https://cloud.ibm.com/apidocs/iam-identity-token-api
+ description: |-
+ name is the name of the Power VS service.
+ Few of the services are
+ IAM - https://cloud.ibm.com/apidocs/iam-identity-token-api
ResourceController - https://cloud.ibm.com/apidocs/resource-controller/resource-controller
Power Cloud - https://cloud.ibm.com/apidocs/power-cloud
- pattern: ^[a-z0-9-]+$
+ enum:
+ - CIS
+ - COS
+ - COSConfig
+ - DNSServices
+ - GlobalCatalog
+ - GlobalSearch
+ - GlobalTagging
+ - HyperProtect
+ - IAM
+ - KeyProtect
+ - Power
+ - ResourceController
+ - ResourceManager
+ - VPC
type: string
url:
- description: url is fully qualified URI with scheme
- https, that overrides the default generated endpoint
- for a client. This must be provided and cannot be
- empty.
+ description: |-
+ url is fully qualified URI with scheme https, that overrides the default generated
+ endpoint for a client.
+ This must be provided and cannot be empty.
format: uri
pattern: ^https://
type: string
@@ -2082,27 +2184,27 @@ spec:
- name
x-kubernetes-list-type: map
zone:
- description: 'zone holds the default zone for the new Power
- VS resources created by the cluster. Note: Currently only
- single-zone OCP clusters are supported'
+ description: |-
+ zone holds the default zone for the new Power VS resources created by the cluster.
+ Note: Currently only single-zone OCP clusters are supported
type: string
type: object
x-kubernetes-validations:
- message: cannot unset resourceGroup once set
rule: '!has(oldSelf.resourceGroup) || has(self.resourceGroup)'
type:
- description: "type is the underlying infrastructure provider for
- the cluster. This value controls whether infrastructure automation
- such as service load balancers, dynamic volume provisioning,
- machine creation and deletion, and other integrations are enabled.
- If None, no infrastructure automation is enabled. Allowed values
- are \"AWS\", \"Azure\", \"BareMetal\", \"GCP\", \"Libvirt\",
- \"OpenStack\", \"VSphere\", \"oVirt\", \"EquinixMetal\", \"PowerVS\",
- \"AlibabaCloud\", \"Nutanix\" and \"None\". Individual components
- may not support all platforms, and must handle unrecognized
- platforms as None if they do not support that platform. \n This
- value will be synced with to the `status.platform` and `status.platformStatus.type`.
- Currently this value cannot be changed once set."
+ description: |-
+ type is the underlying infrastructure provider for the cluster. This
+ value controls whether infrastructure automation such as service load
+ balancers, dynamic volume provisioning, machine creation and deletion, and
+ other integrations are enabled. If None, no infrastructure automation is
+ enabled. Allowed values are "AWS", "Azure", "BareMetal", "GCP", "Libvirt",
+ "OpenStack", "VSphere", "oVirt", "EquinixMetal", "PowerVS", "AlibabaCloud", "Nutanix" and "None".
+ Individual components may not support all platforms, and must handle
+ unrecognized platforms as None if they do not support that platform.
+
+ This value will be synced with to the `status.platform` and `status.platformStatus.type`.
+ Currently this value cannot be changed once set.
enum:
- ""
- AWS
@@ -2127,22 +2229,21 @@ spec:
infrastructure provider.
properties:
apiServerInternalIP:
- description: "apiServerInternalIP is an IP address to contact
- the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. It is the IP that the
- Infrastructure.status.apiServerInternalURI points to. It
- is the IP for a self-hosted load balancer in front of the
- API servers. \n Deprecated: Use APIServerInternalIPs instead."
+ description: |-
+ apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used
+ by components inside the cluster, like kubelets using the infrastructure rather
+ than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI
+ points to. It is the IP for a self-hosted load balancer in front of the API servers.
+
+ Deprecated: Use APIServerInternalIPs instead.
type: string
apiServerInternalIPs:
- description: apiServerInternalIPs are the IP addresses to
- contact the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. These are the IPs for
- a self-hosted load balancer in front of the API servers.
- In dual stack clusters this list contains two IPs otherwise
- only one.
+ description: |-
+ apiServerInternalIPs are the IP addresses to contact the Kubernetes API
+ server that can be used by components inside the cluster, like kubelets
+ using the infrastructure rather than Kubernetes networking. These are the
+ IPs for a self-hosted load balancer in front of the API servers. In dual
+ stack clusters this list contains two IPs otherwise only one.
format: ip
items:
type: string
@@ -2156,17 +2257,18 @@ spec:
&& isIP(self[1]) ? ip(self[0]).family() != ip(self[1]).family()
: true)'
ingressIP:
- description: "ingressIP is an external IP which routes to
- the default ingress controller. The IP is a suitable target
- of a wildcard DNS record used to resolve default route host
- names. \n Deprecated: Use IngressIPs instead."
+ description: |-
+ ingressIP is an external IP which routes to the default ingress controller.
+ The IP is a suitable target of a wildcard DNS record used to resolve default route host names.
+
+ Deprecated: Use IngressIPs instead.
type: string
ingressIPs:
- description: ingressIPs are the external IPs which route to
- the default ingress controller. The IPs are suitable targets
- of a wildcard DNS record used to resolve default route host
- names. In dual stack clusters this list contains two IPs
- otherwise only one.
+ description: |-
+ ingressIPs are the external IPs which route to the default ingress
+ controller. The IPs are suitable targets of a wildcard DNS record used to
+ resolve default route host names. In dual stack clusters this list
+ contains two IPs otherwise only one.
format: ip
items:
type: string
@@ -2187,18 +2289,16 @@ spec:
properties:
type:
default: OpenShiftManagedDefault
- description: type defines the type of load balancer used
- by the cluster on VSphere platform which can be a user-managed
- or openshift-managed load balancer that is to be used
- for the OpenShift API and Ingress endpoints. When set
- to OpenShiftManagedDefault the static pods in charge
- of API and Ingress traffic load-balancing defined in
- the machine config operator will be deployed. When set
- to UserManaged these static pods will not be deployed
- and it is expected that the load balancer is configured
- out of band by the deployer. When omitted, this means
- no opinion and the platform is left to choose a reasonable
- default. The default value is OpenShiftManagedDefault.
+ description: |-
+ type defines the type of load balancer used by the cluster on VSphere platform
+ which can be a user-managed or openshift-managed load balancer
+ that is to be used for the OpenShift API and Ingress endpoints.
+ When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing
+ defined in the machine config operator will be deployed.
+ When set to UserManaged these static pods will not be deployed and it is expected that
+ the load balancer is configured out of band by the deployer.
+ When omitted, this means no opinion and the platform is left to choose a reasonable default.
+ The default value is OpenShiftManagedDefault.
enum:
- OpenShiftManagedDefault
- UserManaged
@@ -2225,13 +2325,13 @@ spec:
x-kubernetes-validations:
- rule: self.all(x, self.exists_one(y, x == y))
nodeDNSIP:
- description: nodeDNSIP is the IP address for the internal
- DNS used by the nodes. Unlike the one managed by the DNS
- operator, `NodeDNSIP` provides name resolution for the nodes
- themselves. There is no DNS-as-a-service for vSphere deployments.
- In order to minimize necessary changes to the datacenter
- DNS, a DNS service is hosted as a static pod to serve those
- hostnames to the nodes in the cluster.
+ description: |-
+ nodeDNSIP is the IP address for the internal DNS used by the
+ nodes. Unlike the one managed by the DNS operator, `NodeDNSIP`
+ provides name resolution for the nodes themselves. There is no DNS-as-a-service for
+ vSphere deployments. In order to minimize necessary changes to the
+ datacenter DNS, a DNS service is hosted as a static pod to serve those hostnames
+ to the nodes in the cluster.
type: string
type: object
type: object
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_infrastructures-TechPreviewNoUpgrade.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_infrastructures-TechPreviewNoUpgrade.crd.yaml
index 2f933db7987e77a0f745ba82a5a4b8d0191b4e19..4f4b31be4e149a1488e6ede803ee24478adb4ab1 100644
--- a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_infrastructures-TechPreviewNoUpgrade.crd.yaml
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_infrastructures-TechPreviewNoUpgrade.crd.yaml
@@ -21,20 +21,25 @@ spec:
- name: v1
schema:
openAPIV3Schema:
- description: "Infrastructure holds cluster-wide information about Infrastructure.
- \ The canonical name is `cluster` \n Compatibility level 1: Stable within
- a major release for a minimum of 12 months or 3 minor releases (whichever
- is longer)."
+ description: |-
+ Infrastructure holds cluster-wide information about Infrastructure. The canonical name is `cluster`
+
+ Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -42,19 +47,19 @@ spec:
description: spec holds user settable values for configuration
properties:
cloudConfig:
- description: "cloudConfig is a reference to a ConfigMap containing
- the cloud provider configuration file. This configuration file is
- used to configure the Kubernetes cloud provider integration when
- using the built-in cloud provider integration or the external cloud
- controller manager. The namespace for this config map is openshift-config.
- \n cloudConfig should only be consumed by the kube_cloud_config
- controller. The controller is responsible for using the user configuration
- in the spec for various platforms and combining that with the user
- provided ConfigMap in this field to create a stitched kube cloud
- config. The controller generates a ConfigMap `kube-cloud-config`
- in `openshift-config-managed` namespace with the kube cloud config
- is stored in `cloud.conf` key. All the clients are expected to use
- the generated ConfigMap only."
+ description: |-
+ cloudConfig is a reference to a ConfigMap containing the cloud provider configuration file.
+ This configuration file is used to configure the Kubernetes cloud provider integration
+ when using the built-in cloud provider integration or the external cloud controller manager.
+ The namespace for this config map is openshift-config.
+
+ cloudConfig should only be consumed by the kube_cloud_config controller.
+ The controller is responsible for using the user configuration in the spec
+ for various platforms and combining that with the user provided ConfigMap in this field
+ to create a stitched kube cloud config.
+ The controller generates a ConfigMap `kube-cloud-config` in `openshift-config-managed` namespace
+ with the kube cloud config is stored in `cloud.conf` key.
+ All the clients are expected to use the generated ConfigMap only.
properties:
key:
description: Key allows pointing to a specific key/value inside
@@ -64,8 +69,9 @@ spec:
type: string
type: object
platformSpec:
- description: platformSpec holds desired information specific to the
- underlying infrastructure provider.
+ description: |-
+ platformSpec holds desired information specific to the underlying
+ infrastructure provider.
properties:
alibabaCloud:
description: AlibabaCloud contains settings specific to the Alibaba
@@ -76,24 +82,27 @@ spec:
Services infrastructure provider.
properties:
serviceEndpoints:
- description: serviceEndpoints list contains custom endpoints
- which will override default service endpoint of AWS Services.
+ description: |-
+ serviceEndpoints list contains custom endpoints which will override default
+ service endpoint of AWS Services.
There must be only one ServiceEndpoint for a service.
items:
- description: AWSServiceEndpoint store the configuration
- of a custom url to override existing defaults of AWS Services.
+ description: |-
+ AWSServiceEndpoint store the configuration of a custom url to
+ override existing defaults of AWS Services.
properties:
name:
- description: name is the name of the AWS service. The
- list of all the service names can be found at https://docs.aws.amazon.com/general/latest/gr/aws-service-information.html
+ description: |-
+ name is the name of the AWS service.
+ The list of all the service names can be found at https://docs.aws.amazon.com/general/latest/gr/aws-service-information.html
This must be provided and cannot be empty.
pattern: ^[a-z0-9-]+$
type: string
url:
- description: url is fully qualified URI with scheme
- https, that overrides the default generated endpoint
- for a client. This must be provided and cannot be
- empty.
+ description: |-
+ url is fully qualified URI with scheme https, that overrides the default generated
+ endpoint for a client.
+ This must be provided and cannot be empty.
pattern: ^https://
type: string
type: object
@@ -109,17 +118,16 @@ spec:
platform.
properties:
apiServerInternalIPs:
- description: apiServerInternalIPs are the IP addresses to
- contact the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. These are the IPs for
- a self-hosted load balancer in front of the API servers.
- In dual stack clusters this list contains two IP addresses,
- one from IPv4 family and one from IPv6. In single stack
- clusters a single IP address is expected. When omitted,
- values from the status.apiServerInternalIPs will be used.
- Once set, the list cannot be completely removed (but its
- second entry can).
+ description: |-
+ apiServerInternalIPs are the IP addresses to contact the Kubernetes API
+ server that can be used by components inside the cluster, like kubelets
+ using the infrastructure rather than Kubernetes networking. These are the
+ IPs for a self-hosted load balancer in front of the API servers.
+ In dual stack clusters this list contains two IP addresses, one from IPv4
+ family and one from IPv6.
+ In single stack clusters a single IP address is expected.
+ When omitted, values from the status.apiServerInternalIPs will be used.
+ Once set, the list cannot be completely removed (but its second entry can).
items:
description: IP is an IP address (for example, "10.0.0.0"
or "fd00::").
@@ -138,15 +146,15 @@ spec:
rule: 'size(self) == 2 && isIP(self[0]) && isIP(self[1])
? ip(self[0]).family() != ip(self[1]).family() : true'
ingressIPs:
- description: ingressIPs are the external IPs which route to
- the default ingress controller. The IPs are suitable targets
- of a wildcard DNS record used to resolve default route host
- names. In dual stack clusters this list contains two IP
- addresses, one from IPv4 family and one from IPv6. In single
- stack clusters a single IP address is expected. When omitted,
- values from the status.ingressIPs will be used. Once set,
- the list cannot be completely removed (but its second entry
- can).
+ description: |-
+ ingressIPs are the external IPs which route to the default ingress
+ controller. The IPs are suitable targets of a wildcard DNS record used to
+ resolve default route host names.
+ In dual stack clusters this list contains two IP addresses, one from IPv4
+ family and one from IPv6.
+ In single stack clusters a single IP address is expected.
+ When omitted, values from the status.ingressIPs will be used.
+ Once set, the list cannot be completely removed (but its second entry can).
items:
description: IP is an IP address (for example, "10.0.0.0"
or "fd00::").
@@ -165,10 +173,10 @@ spec:
rule: 'size(self) == 2 && isIP(self[0]) && isIP(self[1])
? ip(self[0]).family() != ip(self[1]).family() : true'
machineNetworks:
- description: machineNetworks are IP networks used to connect
- all the OpenShift cluster nodes. Each network is provided
- in the CIDR format and should be IPv4 or IPv6, for example
- "10.0.0.0/8" or "fd00::/8".
+ description: |-
+ machineNetworks are IP networks used to connect all the OpenShift cluster
+ nodes. Each network is provided in the CIDR format and should be IPv4 or IPv6,
+ for example "10.0.0.0/8" or "fd00::/8".
items:
description: CIDR is an IP address range in CIDR notation
(for example, "10.0.0.0/8" or "fd00::/8").
@@ -194,17 +202,15 @@ spec:
Metal infrastructure provider.
type: object
external:
- description: ExternalPlatformType represents generic infrastructure
- provider. Platform-specific components should be supplemented
- separately.
+ description: |-
+ ExternalPlatformType represents generic infrastructure provider.
+ Platform-specific components should be supplemented separately.
properties:
platformName:
default: Unknown
- description: PlatformName holds the arbitrary string representing
- the infrastructure provider name, expected to be set at
- the installation time. This field is solely for informational
- and reporting purposes and is not expected to be used for
- decision-making.
+ description: |-
+ PlatformName holds the arbitrary string representing the infrastructure provider name, expected to be set at the installation time.
+ This field is solely for informational and reporting purposes and is not expected to be used for decision-making.
type: string
x-kubernetes-validations:
- message: platform name cannot be changed once set
@@ -227,20 +233,19 @@ spec:
infrastructure provider.
properties:
failureDomains:
- description: failureDomains configures failure domains information
- for the Nutanix platform. When set, the failure domains
- defined here may be used to spread Machines across prism
- element clusters to improve fault tolerance of the cluster.
+ description: |-
+ failureDomains configures failure domains information for the Nutanix platform.
+ When set, the failure domains defined here may be used to spread Machines across
+ prism element clusters to improve fault tolerance of the cluster.
items:
description: NutanixFailureDomain configures failure domain
information for the Nutanix platform.
properties:
cluster:
- description: cluster is to identify the cluster (the
- Prism Element under management of the Prism Central),
- in which the Machine's VM will be created. The cluster
- identifier (uuid or name) can be obtained from the
- Prism Central console or using the prism_central API.
+ description: |-
+ cluster is to identify the cluster (the Prism Element under management of the Prism Central),
+ in which the Machine's VM will be created. The cluster identifier (uuid or name) can be obtained
+ from the Prism Central console or using the prism_central API.
properties:
name:
description: name is the resource name in the PC.
@@ -270,23 +275,22 @@ spec:
rule: 'has(self.type) && self.type == ''Name'' ? has(self.name)
: !has(self.name)'
name:
- description: name defines the unique name of a failure
- domain. Name is required and must be at most 64 characters
- in length. It must consist of only lower case alphanumeric
- characters and hyphens (-). It must start and end
- with an alphanumeric character. This value is arbitrary
- and is used to identify the failure domain within
- the platform.
+ description: |-
+ name defines the unique name of a failure domain.
+ Name is required and must be at most 64 characters in length.
+ It must consist of only lower case alphanumeric characters and hyphens (-).
+ It must start and end with an alphanumeric character.
+ This value is arbitrary and is used to identify the failure domain within the platform.
maxLength: 64
minLength: 1
pattern: '[a-z0-9]([-a-z0-9]*[a-z0-9])?'
type: string
subnets:
- description: subnets holds a list of identifiers (one
- or more) of the cluster's network subnets for the
- Machine's VM to connect to. The subnet identifiers
- (uuid or name) can be obtained from the Prism Central
- console or using the prism_central API.
+ description: |-
+ subnets holds a list of identifiers (one or more) of the cluster's network subnets
+ If the feature gate NutanixMultiSubnets is enabled, up to 32 subnets may be configured.
+ for the Machine's VM to connect to. The subnet identifiers (uuid or name) can be
+ obtained from the Prism Central console or using the prism_central API.
items:
description: NutanixResourceIdentifier holds the identity
of a Nutanix PC resource (cluster, image, subnet,
@@ -320,27 +324,28 @@ spec:
is Name, and forbidden otherwise
rule: 'has(self.type) && self.type == ''Name'' ? has(self.name)
: !has(self.name)'
- maxItems: 1
+ maxItems: 32
minItems: 1
type: array
- x-kubernetes-list-map-keys:
- - type
- x-kubernetes-list-type: map
+ x-kubernetes-list-type: atomic
+ x-kubernetes-validations:
+ - message: each subnet must be unique
+ rule: self.all(x, self.exists_one(y, x == y))
required:
- cluster
- name
- subnets
type: object
+ maxItems: 32
type: array
x-kubernetes-list-map-keys:
- name
x-kubernetes-list-type: map
prismCentral:
- description: prismCentral holds the endpoint address and port
- to access the Nutanix Prism Central. When a cluster-wide
- proxy is installed, by default, this endpoint will be accessed
- via the proxy. Should you wish for communication with this
- endpoint not to be proxied, please add the endpoint to the
+ description: |-
+ prismCentral holds the endpoint address and port to access the Nutanix Prism Central.
+ When a cluster-wide proxy is installed, by default, this endpoint will be accessed via the proxy.
+ Should you wish for communication with this endpoint not to be proxied, please add the endpoint to the
proxy spec.noProxy list.
properties:
address:
@@ -361,25 +366,22 @@ spec:
- port
type: object
prismElements:
- description: prismElements holds one or more endpoint address
- and port data to access the Nutanix Prism Elements (clusters)
- of the Nutanix Prism Central. Currently we only support
- one Prism Element (cluster) for an OpenShift cluster, where
- all the Nutanix resources (VMs, subnets, volumes, etc.)
- used in the OpenShift cluster are located. In the future,
- we may support Nutanix resources (VMs, etc.) spread over
- multiple Prism Elements (clusters) of the Prism Central.
+ description: |-
+ prismElements holds one or more endpoint address and port data to access the Nutanix
+ Prism Elements (clusters) of the Nutanix Prism Central. Currently we only support one
+ Prism Element (cluster) for an OpenShift cluster, where all the Nutanix resources (VMs, subnets, volumes, etc.)
+ used in the OpenShift cluster are located. In the future, we may support Nutanix resources (VMs, etc.)
+ spread over multiple Prism Elements (clusters) of the Prism Central.
items:
description: NutanixPrismElementEndpoint holds the name
and endpoint data for a Prism Element (cluster)
properties:
endpoint:
- description: endpoint holds the endpoint address and
- port data of the Prism Element (cluster). When a cluster-wide
- proxy is installed, by default, this endpoint will
- be accessed via the proxy. Should you wish for communication
- with this endpoint not to be proxied, please add the
- endpoint to the proxy spec.noProxy list.
+ description: |-
+ endpoint holds the endpoint address and port data of the Prism Element (cluster).
+ When a cluster-wide proxy is installed, by default, this endpoint will be accessed via the proxy.
+ Should you wish for communication with this endpoint not to be proxied, please add the endpoint to the
+ proxy spec.noProxy list.
properties:
address:
description: address is the endpoint address (DNS
@@ -399,10 +401,9 @@ spec:
- port
type: object
name:
- description: name is the name of the Prism Element (cluster).
- This value will correspond with the cluster field
- configured on other resources (eg Machines, PVCs,
- etc).
+ description: |-
+ name is the name of the Prism Element (cluster). This value will correspond with
+ the cluster field configured on other resources (eg Machines, PVCs, etc).
maxLength: 256
type: string
required:
@@ -422,17 +423,16 @@ spec:
infrastructure provider.
properties:
apiServerInternalIPs:
- description: apiServerInternalIPs are the IP addresses to
- contact the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. These are the IPs for
- a self-hosted load balancer in front of the API servers.
- In dual stack clusters this list contains two IP addresses,
- one from IPv4 family and one from IPv6. In single stack
- clusters a single IP address is expected. When omitted,
- values from the status.apiServerInternalIPs will be used.
- Once set, the list cannot be completely removed (but its
- second entry can).
+ description: |-
+ apiServerInternalIPs are the IP addresses to contact the Kubernetes API
+ server that can be used by components inside the cluster, like kubelets
+ using the infrastructure rather than Kubernetes networking. These are the
+ IPs for a self-hosted load balancer in front of the API servers.
+ In dual stack clusters this list contains two IP addresses, one from IPv4
+ family and one from IPv6.
+ In single stack clusters a single IP address is expected.
+ When omitted, values from the status.apiServerInternalIPs will be used.
+ Once set, the list cannot be completely removed (but its second entry can).
items:
description: IP is an IP address (for example, "10.0.0.0"
or "fd00::").
@@ -451,15 +451,15 @@ spec:
rule: 'size(self) == 2 && isIP(self[0]) && isIP(self[1])
? ip(self[0]).family() != ip(self[1]).family() : true'
ingressIPs:
- description: ingressIPs are the external IPs which route to
- the default ingress controller. The IPs are suitable targets
- of a wildcard DNS record used to resolve default route host
- names. In dual stack clusters this list contains two IP
- addresses, one from IPv4 family and one from IPv6. In single
- stack clusters a single IP address is expected. When omitted,
- values from the status.ingressIPs will be used. Once set,
- the list cannot be completely removed (but its second entry
- can).
+ description: |-
+ ingressIPs are the external IPs which route to the default ingress
+ controller. The IPs are suitable targets of a wildcard DNS record used to
+ resolve default route host names.
+ In dual stack clusters this list contains two IP addresses, one from IPv4
+ family and one from IPv6.
+ In single stack clusters a single IP address is expected.
+ When omitted, values from the status.ingressIPs will be used.
+ Once set, the list cannot be completely removed (but its second entry can).
items:
description: IP is an IP address (for example, "10.0.0.0"
or "fd00::").
@@ -478,10 +478,10 @@ spec:
rule: 'size(self) == 2 && isIP(self[0]) && isIP(self[1])
? ip(self[0]).family() != ip(self[1]).family() : true'
machineNetworks:
- description: machineNetworks are IP networks used to connect
- all the OpenShift cluster nodes. Each network is provided
- in the CIDR format and should be IPv4 or IPv6, for example
- "10.0.0.0/8" or "fd00::/8".
+ description: |-
+ machineNetworks are IP networks used to connect all the OpenShift cluster
+ nodes. Each network is provided in the CIDR format and should be IPv4 or IPv6,
+ for example "10.0.0.0/8" or "fd00::/8".
items:
description: CIDR is an IP address range in CIDR notation
(for example, "10.0.0.0/8" or "fd00::/8").
@@ -511,26 +511,42 @@ spec:
Systems Virtual Servers infrastructure provider.
properties:
serviceEndpoints:
- description: serviceEndpoints is a list of custom endpoints
- which will override the default service endpoints of a Power
- VS service.
+ description: |-
+ serviceEndpoints is a list of custom endpoints which will override the default
+ service endpoints of a Power VS service.
items:
- description: PowervsServiceEndpoint stores the configuration
- of a custom url to override existing defaults of PowerVS
- Services.
+ description: |-
+ PowervsServiceEndpoint stores the configuration of a custom url to
+ override existing defaults of PowerVS Services.
properties:
name:
- description: name is the name of the Power VS service.
- Few of the services are IAM - https://cloud.ibm.com/apidocs/iam-identity-token-api
+ description: |-
+ name is the name of the Power VS service.
+ Few of the services are
+ IAM - https://cloud.ibm.com/apidocs/iam-identity-token-api
ResourceController - https://cloud.ibm.com/apidocs/resource-controller/resource-controller
Power Cloud - https://cloud.ibm.com/apidocs/power-cloud
- pattern: ^[a-z0-9-]+$
+ enum:
+ - CIS
+ - COS
+ - COSConfig
+ - DNSServices
+ - GlobalCatalog
+ - GlobalSearch
+ - GlobalTagging
+ - HyperProtect
+ - IAM
+ - KeyProtect
+ - Power
+ - ResourceController
+ - ResourceManager
+ - VPC
type: string
url:
- description: url is fully qualified URI with scheme
- https, that overrides the default generated endpoint
- for a client. This must be provided and cannot be
- empty.
+ description: |-
+ url is fully qualified URI with scheme https, that overrides the default generated
+ endpoint for a client.
+ This must be provided and cannot be empty.
format: uri
pattern: ^https://
type: string
@@ -544,16 +560,15 @@ spec:
x-kubernetes-list-type: map
type: object
type:
- description: type is the underlying infrastructure provider for
- the cluster. This value controls whether infrastructure automation
- such as service load balancers, dynamic volume provisioning,
- machine creation and deletion, and other integrations are enabled.
- If None, no infrastructure automation is enabled. Allowed values
- are "AWS", "Azure", "BareMetal", "GCP", "Libvirt", "OpenStack",
- "VSphere", "oVirt", "KubeVirt", "EquinixMetal", "PowerVS", "AlibabaCloud",
- "Nutanix" and "None". Individual components may not support
- all platforms, and must handle unrecognized platforms as None
- if they do not support that platform.
+ description: |-
+ type is the underlying infrastructure provider for the cluster. This
+ value controls whether infrastructure automation such as service load
+ balancers, dynamic volume provisioning, machine creation and deletion, and
+ other integrations are enabled. If None, no infrastructure automation is
+ enabled. Allowed values are "AWS", "Azure", "BareMetal", "GCP", "Libvirt",
+ "OpenStack", "VSphere", "oVirt", "KubeVirt", "EquinixMetal", "PowerVS",
+ "AlibabaCloud", "Nutanix" and "None". Individual components may not support all platforms,
+ and must handle unrecognized platforms as None if they do not support that platform.
enum:
- ""
- AWS
@@ -578,17 +593,16 @@ spec:
infrastructure provider.
properties:
apiServerInternalIPs:
- description: apiServerInternalIPs are the IP addresses to
- contact the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. These are the IPs for
- a self-hosted load balancer in front of the API servers.
- In dual stack clusters this list contains two IP addresses,
- one from IPv4 family and one from IPv6. In single stack
- clusters a single IP address is expected. When omitted,
- values from the status.apiServerInternalIPs will be used.
- Once set, the list cannot be completely removed (but its
- second entry can).
+ description: |-
+ apiServerInternalIPs are the IP addresses to contact the Kubernetes API
+ server that can be used by components inside the cluster, like kubelets
+ using the infrastructure rather than Kubernetes networking. These are the
+ IPs for a self-hosted load balancer in front of the API servers.
+ In dual stack clusters this list contains two IP addresses, one from IPv4
+ family and one from IPv6.
+ In single stack clusters a single IP address is expected.
+ When omitted, values from the status.apiServerInternalIPs will be used.
+ Once set, the list cannot be completely removed (but its second entry can).
items:
description: IP is an IP address (for example, "10.0.0.0"
or "fd00::").
@@ -607,24 +621,26 @@ spec:
rule: 'size(self) == 2 && isIP(self[0]) && isIP(self[1])
? ip(self[0]).family() != ip(self[1]).family() : true'
failureDomains:
- description: failureDomains contains the definition of region,
- zone and the vCenter topology. If this is omitted failure
- domains (regions and zones) will not be used.
+ description: |-
+ failureDomains contains the definition of region, zone and the vCenter topology.
+ If this is omitted failure domains (regions and zones) will not be used.
items:
- description: VSpherePlatformFailureDomainSpec holds the
- region and zone failure domain and the vCenter topology
- of that failure domain.
+ description: |-
+ VSpherePlatformFailureDomainSpec holds the region and zone failure domain and
+ the vCenter topology of that failure domain.
properties:
name:
- description: name defines the arbitrary but unique name
+ description: |-
+ name defines the arbitrary but unique name
of a failure domain.
maxLength: 256
minLength: 1
type: string
region:
- description: region defines the name of a region tag
- that will be attached to a vCenter datacenter. The
- tag category in vCenter must be named openshift-region.
+ description: |-
+ region defines the name of a region tag that will
+ be attached to a vCenter datacenter. The tag
+ category in vCenter must be named openshift-region.
maxLength: 80
minLength: 1
type: string
@@ -634,7 +650,7 @@ spec:
- format: ipv6
- format: hostname
description: server is the fully-qualified domain name
- or the IP address of the vCenter server. ---
+ or the IP address of the vCenter server.
maxLength: 255
minLength: 1
type: string
@@ -643,45 +659,48 @@ spec:
using vSphere constructs
properties:
computeCluster:
- description: computeCluster the absolute path of
- the vCenter cluster in which virtual machine will
- be located. The absolute path is of the form /<datacenter>/host/<cluster>.
+ description: |-
+ computeCluster the absolute path of the vCenter cluster
+ in which virtual machine will be located.
+ The absolute path is of the form /<datacenter>/host/<cluster>.
The maximum length of the path is 2048 characters.
maxLength: 2048
pattern: ^/.*?/host/.*?
type: string
datacenter:
- description: datacenter is the name of vCenter datacenter
- in which virtual machines will be located. The
- maximum length of the datacenter name is 80 characters.
+ description: |-
+ datacenter is the name of vCenter datacenter in which virtual machines will be located.
+ The maximum length of the datacenter name is 80 characters.
maxLength: 80
type: string
datastore:
- description: datastore is the absolute path of the
- datastore in which the virtual machine is located.
+ description: |-
+ datastore is the absolute path of the datastore in which the
+ virtual machine is located.
The absolute path is of the form /<datacenter>/datastore/<datastore>
The maximum length of the path is 2048 characters.
maxLength: 2048
pattern: ^/.*?/datastore/.*?
type: string
folder:
- description: folder is the absolute path of the
- folder where virtual machines are located. The
- absolute path is of the form /<datacenter>/vm/<folder>.
+ description: |-
+ folder is the absolute path of the folder where
+ virtual machines are located. The absolute path
+ is of the form /<datacenter>/vm/<folder>.
The maximum length of the path is 2048 characters.
maxLength: 2048
pattern: ^/.*?/vm/.*?
type: string
networks:
- description: 'networks is the list of port group
- network names within this failure domain. If feature
- gate VSphereMultiNetworks is enabled, up to 10
- network adapters may be defined. 10 is the maximum
- number of virtual network devices which may be
- attached to a VM as defined by: https://configmax.esp.vmware.com/guest?vmwareproduct=vSphere&release=vSphere%208.0&categories=1-0
- The available networks (port groups) can be listed
- using `govc ls ''network/*''` Networks should
- be in the form of an absolute path: /<datacenter>/network/<portgroup>.'
+ description: |-
+ networks is the list of port group network names within this failure domain.
+ If feature gate VSphereMultiNetworks is enabled, up to 10 network adapters may be defined.
+ 10 is the maximum number of virtual network devices which may be attached to a VM as defined by:
+ https://configmax.esp.vmware.com/guest?vmwareproduct=vSphere&release=vSphere%208.0&categories=1-0
+ The available networks (port groups) can be listed using
+ `govc ls 'network/*'`
+ Networks should be in the form of an absolute path:
+ /<datacenter>/network/<portgroup>.
items:
type: string
maxItems: 10
@@ -689,25 +708,24 @@ spec:
type: array
x-kubernetes-list-type: atomic
resourcePool:
- description: resourcePool is the absolute path of
- the resource pool where virtual machines will
- be created. The absolute path is of the form /<datacenter>/host/<cluster>/Resources/<resourcepool>.
+ description: |-
+ resourcePool is the absolute path of the resource pool where virtual machines will be
+ created. The absolute path is of the form /<datacenter>/host/<cluster>/Resources/<resourcepool>.
The maximum length of the path is 2048 characters.
maxLength: 2048
pattern: ^/.*?/host/.*?/Resources.*
type: string
template:
- description: "template is the full inventory path
- of the virtual machine or template that will be
- cloned when creating new machines in this failure
- domain. The maximum length of the path is 2048
- characters. \n When omitted, the template will
- be calculated by the control plane machineset
- operator based on the region and zone defined
- in VSpherePlatformFailureDomainSpec. For example,
- for zone=zonea, region=region1, and infrastructure
- name=test, the template path would be calculated
- as /<datacenter>/vm/test-rhcos-region1-zonea."
+ description: |-
+ template is the full inventory path of the virtual machine or template
+ that will be cloned when creating new machines in this failure domain.
+ The maximum length of the path is 2048 characters.
+
+ When omitted, the template will be calculated by the control plane
+ machineset operator based on the region and zone defined in
+ VSpherePlatformFailureDomainSpec.
+ For example, for zone=zonea, region=region1, and infrastructure name=test,
+ the template path would be calculated as /<datacenter>/vm/test-rhcos-region1-zonea.
maxLength: 2048
minLength: 1
pattern: ^/.*?/vm/.*?
@@ -719,9 +737,10 @@ spec:
- networks
type: object
zone:
- description: zone defines the name of a zone tag that
- will be attached to a vCenter cluster. The tag category
- in vCenter must be named openshift-zone.
+ description: |-
+ zone defines the name of a zone tag that will
+ be attached to a vCenter cluster. The tag
+ category in vCenter must be named openshift-zone.
maxLength: 80
minLength: 1
type: string
@@ -737,15 +756,15 @@ spec:
- name
x-kubernetes-list-type: map
ingressIPs:
- description: ingressIPs are the external IPs which route to
- the default ingress controller. The IPs are suitable targets
- of a wildcard DNS record used to resolve default route host
- names. In dual stack clusters this list contains two IP
- addresses, one from IPv4 family and one from IPv6. In single
- stack clusters a single IP address is expected. When omitted,
- values from the status.ingressIPs will be used. Once set,
- the list cannot be completely removed (but its second entry
- can).
+ description: |-
+ ingressIPs are the external IPs which route to the default ingress
+ controller. The IPs are suitable targets of a wildcard DNS record used to
+ resolve default route host names.
+ In dual stack clusters this list contains two IP addresses, one from IPv4
+ family and one from IPv6.
+ In single stack clusters a single IP address is expected.
+ When omitted, values from the status.ingressIPs will be used.
+ Once set, the list cannot be completely removed (but its second entry can).
items:
description: IP is an IP address (for example, "10.0.0.0"
or "fd00::").
@@ -764,10 +783,10 @@ spec:
rule: 'size(self) == 2 && isIP(self[0]) && isIP(self[1])
? ip(self[0]).family() != ip(self[1]).family() : true'
machineNetworks:
- description: machineNetworks are IP networks used to connect
- all the OpenShift cluster nodes. Each network is provided
- in the CIDR format and should be IPv4 or IPv6, for example
- "10.0.0.0/8" or "fd00::/8".
+ description: |-
+ machineNetworks are IP networks used to connect all the OpenShift cluster
+ nodes. Each network is provided in the CIDR format and should be IPv4 or IPv6,
+ for example "10.0.0.0/8" or "fd00::/8".
items:
description: CIDR is an IP address range in CIDR notation
(for example, "10.0.0.0/8" or "fd00::/8").
@@ -783,41 +802,39 @@ spec:
x-kubernetes-validations:
- rule: self.all(x, self.exists_one(y, x == y))
nodeNetworking:
- description: nodeNetworking contains the definition of internal
- and external network constraints for assigning the node's
- networking. If this field is omitted, networking defaults
- to the legacy address selection behavior which is to only
- support a single address and return the first one found.
+ description: |-
+ nodeNetworking contains the definition of internal and external network constraints for
+ assigning the node's networking.
+ If this field is omitted, networking defaults to the legacy
+ address selection behavior which is to only support a single address and
+ return the first one found.
properties:
external:
description: external represents the network configuration
of the node that is externally routable.
properties:
excludeNetworkSubnetCidr:
- description: excludeNetworkSubnetCidr IP addresses
- in subnet ranges will be excluded when selecting
- the IP address from the VirtualMachine's VM for
- use in the status.addresses fields. ---
+ description: |-
+ excludeNetworkSubnetCidr IP addresses in subnet ranges will be excluded when selecting
+ the IP address from the VirtualMachine's VM for use in the status.addresses fields.
items:
format: cidr
type: string
type: array
x-kubernetes-list-type: atomic
network:
- description: network VirtualMachine's VM Network names
- that will be used to when searching for status.addresses
- fields. Note that if internal.networkSubnetCIDR
- and external.networkSubnetCIDR are not set, then
- the vNIC associated to this network must only have
- a single IP address assigned to it. The available
- networks (port groups) can be listed using `govc
- ls 'network/*'`
+ description: |-
+ network VirtualMachine's VM Network names that will be used to when searching
+ for status.addresses fields. Note that if internal.networkSubnetCIDR and
+ external.networkSubnetCIDR are not set, then the vNIC associated to this network must
+ only have a single IP address assigned to it.
+ The available networks (port groups) can be listed using
+ `govc ls 'network/*'`
type: string
networkSubnetCidr:
- description: networkSubnetCidr IP address on VirtualMachine's
- network interfaces included in the fields' CIDRs
- that will be used in respective status.addresses
- fields. ---
+ description: |-
+ networkSubnetCidr IP address on VirtualMachine's network interfaces included in the fields' CIDRs
+ that will be used in respective status.addresses fields.
items:
format: cidr
type: string
@@ -829,30 +846,27 @@ spec:
of the node that is routable only within the cluster.
properties:
excludeNetworkSubnetCidr:
- description: excludeNetworkSubnetCidr IP addresses
- in subnet ranges will be excluded when selecting
- the IP address from the VirtualMachine's VM for
- use in the status.addresses fields. ---
+ description: |-
+ excludeNetworkSubnetCidr IP addresses in subnet ranges will be excluded when selecting
+ the IP address from the VirtualMachine's VM for use in the status.addresses fields.
items:
format: cidr
type: string
type: array
x-kubernetes-list-type: atomic
network:
- description: network VirtualMachine's VM Network names
- that will be used to when searching for status.addresses
- fields. Note that if internal.networkSubnetCIDR
- and external.networkSubnetCIDR are not set, then
- the vNIC associated to this network must only have
- a single IP address assigned to it. The available
- networks (port groups) can be listed using `govc
- ls 'network/*'`
+ description: |-
+ network VirtualMachine's VM Network names that will be used to when searching
+ for status.addresses fields. Note that if internal.networkSubnetCIDR and
+ external.networkSubnetCIDR are not set, then the vNIC associated to this network must
+ only have a single IP address assigned to it.
+ The available networks (port groups) can be listed using
+ `govc ls 'network/*'`
type: string
networkSubnetCidr:
- description: networkSubnetCidr IP address on VirtualMachine's
- network interfaces included in the fields' CIDRs
- that will be used in respective status.addresses
- fields. ---
+ description: |-
+ networkSubnetCidr IP address on VirtualMachine's network interfaces included in the fields' CIDRs
+ that will be used in respective status.addresses fields.
items:
format: cidr
type: string
@@ -861,36 +875,38 @@ spec:
type: object
type: object
vcenters:
- description: vcenters holds the connection details for services
- to communicate with vCenter. Currently, only a single vCenter
- is supported, but in tech preview 3 vCenters are supported.
- Once the cluster has been installed, you are unable to change
- the current number of defined vCenters except in the case
- where the cluster has been upgraded from a version of OpenShift
- where the vsphere platform spec was not present. You may
- make modifications to the existing vCenters that are defined
- in the vcenters list in order to match with any added or
- modified failure domains. ---
+ description: |-
+ vcenters holds the connection details for services to communicate with vCenter.
+ Currently, only a single vCenter is supported, but in tech preview 3 vCenters are supported.
+ Once the cluster has been installed, you are unable to change the current number of defined
+ vCenters except in the case where the cluster has been upgraded from a version of OpenShift
+ where the vsphere platform spec was not present. You may make modifications to the existing
+ vCenters that are defined in the vcenters list in order to match with any added or modified
+ failure domains.
items:
- description: VSpherePlatformVCenterSpec stores the vCenter
- connection fields. This is used by the vSphere CCM.
+ description: |-
+ VSpherePlatformVCenterSpec stores the vCenter connection fields.
+ This is used by the vSphere CCM.
properties:
datacenters:
- description: The vCenter Datacenters in which the RHCOS
- vm guests are located. This field will be used by
- the Cloud Controller Manager. Each datacenter listed
- here should be used within a topology.
+ description: |-
+ The vCenter Datacenters in which the RHCOS
+ vm guests are located. This field will
+ be used by the Cloud Controller Manager.
+ Each datacenter listed here should be used within
+ a topology.
items:
type: string
minItems: 1
type: array
x-kubernetes-list-type: set
port:
- description: port is the TCP port that will be used
- to communicate to the vCenter endpoint. When omitted,
- this means the user has no opinion and it is up to
- the platform to choose a sensible default, which is
- subject to change over time.
+ description: |-
+ port is the TCP port that will be used to communicate to
+ the vCenter endpoint.
+ When omitted, this means the user has no opinion and
+ it is up to the platform to choose a sensible default,
+ which is subject to change over time.
format: int32
maximum: 32767
minimum: 1
@@ -901,7 +917,7 @@ spec:
- format: ipv6
- format: hostname
description: server is the fully-qualified domain name
- or the IP address of the vCenter server. ---
+ or the IP address of the vCenter server.
maxLength: 255
type: string
required:
@@ -936,28 +952,27 @@ spec:
be overridden.
properties:
apiServerInternalURI:
- description: apiServerInternalURL is a valid URI with scheme 'https',
- address and optionally a port (defaulting to 443). apiServerInternalURL
- can be used by components like kubelets, to contact the Kubernetes
- API server using the infrastructure provider rather than Kubernetes
- networking.
+ description: |-
+ apiServerInternalURL is a valid URI with scheme 'https',
+ address and optionally a port (defaulting to 443). apiServerInternalURL can be used by components
+ like kubelets, to contact the Kubernetes API server using the
+ infrastructure provider rather than Kubernetes networking.
type: string
apiServerURL:
- description: apiServerURL is a valid URI with scheme 'https', address
- and optionally a port (defaulting to 443). apiServerURL can be
- used by components like the web console to tell users where to find
- the Kubernetes API.
+ description: |-
+ apiServerURL is a valid URI with scheme 'https', address and
+ optionally a port (defaulting to 443). apiServerURL can be used by components like the web console
+ to tell users where to find the Kubernetes API.
type: string
controlPlaneTopology:
default: HighlyAvailable
- description: controlPlaneTopology expresses the expectations for operands
- that normally run on control nodes. The default is 'HighlyAvailable',
- which represents the behavior operators have in a "normal" cluster.
+ description: |-
+ controlPlaneTopology expresses the expectations for operands that normally run on control nodes.
+ The default is 'HighlyAvailable', which represents the behavior operators have in a "normal" cluster.
The 'SingleReplica' mode will be used in single-node deployments
- and the operators should not configure the operand for highly-available
- operation The 'External' mode indicates that the control plane is
- hosted externally to the cluster and that its components are not
- visible within the cluster.
+ and the operators should not configure the operand for highly-available operation
+ The 'External' mode indicates that the control plane is hosted externally to the cluster and that
+ its components are not visible within the cluster.
enum:
- HighlyAvailable
- SingleReplica
@@ -965,47 +980,49 @@ spec:
type: string
cpuPartitioning:
default: None
- description: cpuPartitioning expresses if CPU partitioning is a currently
- enabled feature in the cluster. CPU Partitioning means that this
- cluster can support partitioning workloads to specific CPU Sets.
- Valid values are "None" and "AllNodes". When omitted, the default
- value is "None". The default value of "None" indicates that no nodes
- will be setup with CPU partitioning. The "AllNodes" value indicates
- that all nodes have been setup with CPU partitioning, and can then
- be further configured via the PerformanceProfile API.
+ description: |-
+ cpuPartitioning expresses if CPU partitioning is a currently enabled feature in the cluster.
+ CPU Partitioning means that this cluster can support partitioning workloads to specific CPU Sets.
+ Valid values are "None" and "AllNodes". When omitted, the default value is "None".
+ The default value of "None" indicates that no nodes will be setup with CPU partitioning.
+ The "AllNodes" value indicates that all nodes have been setup with CPU partitioning,
+ and can then be further configured via the PerformanceProfile API.
enum:
- None
- AllNodes
type: string
etcdDiscoveryDomain:
- description: 'etcdDiscoveryDomain is the domain used to fetch the
- SRV records for discovering etcd servers and clients. For more info:
- https://github.com/etcd-io/etcd/blob/329be66e8b3f9e2e6af83c123ff89297e49ebd15/Documentation/op-guide/clustering.md#dns-discovery
- deprecated: as of 4.7, this field is no longer set or honored. It
- will be removed in a future release.'
+ description: |-
+ etcdDiscoveryDomain is the domain used to fetch the SRV records for discovering
+ etcd servers and clients.
+ For more info: https://github.com/etcd-io/etcd/blob/329be66e8b3f9e2e6af83c123ff89297e49ebd15/Documentation/op-guide/clustering.md#dns-discovery
+ deprecated: as of 4.7, this field is no longer set or honored. It will be removed in a future release.
type: string
infrastructureName:
- description: infrastructureName uniquely identifies a cluster with
- a human friendly name. Once set it should not be changed. Must be
- of max length 27 and must have only alphanumeric or hyphen characters.
+ description: |-
+ infrastructureName uniquely identifies a cluster with a human friendly name.
+ Once set it should not be changed. Must be of max length 27 and must have only
+ alphanumeric or hyphen characters.
type: string
infrastructureTopology:
default: HighlyAvailable
- description: 'infrastructureTopology expresses the expectations for
- infrastructure services that do not run on control plane nodes,
- usually indicated by a node selector for a `role` value other than
- `master`. The default is ''HighlyAvailable'', which represents the
- behavior operators have in a "normal" cluster. The ''SingleReplica''
- mode will be used in single-node deployments and the operators should
- not configure the operand for highly-available operation NOTE: External
- topology mode is not applicable for this field.'
+ description: |-
+ infrastructureTopology expresses the expectations for infrastructure services that do not run on control
+ plane nodes, usually indicated by a node selector for a `role` value
+ other than `master`.
+ The default is 'HighlyAvailable', which represents the behavior operators have in a "normal" cluster.
+ The 'SingleReplica' mode will be used in single-node deployments
+ and the operators should not configure the operand for highly-available operation
+ NOTE: External topology mode is not applicable for this field.
enum:
- HighlyAvailable
- SingleReplica
type: string
platform:
- description: "platform is the underlying infrastructure provider for
- the cluster. \n Deprecated: Use platformStatus.type instead."
+ description: |-
+ platform is the underlying infrastructure provider for the cluster.
+
+ Deprecated: Use platformStatus.type instead.
enum:
- ""
- AWS
@@ -1026,8 +1043,9 @@ spec:
- External
type: string
platformStatus:
- description: platformStatus holds status information specific to the
- underlying infrastructure provider.
+ description: |-
+ platformStatus holds status information specific to the underlying
+ infrastructure provider.
properties:
alibabaCloud:
description: AlibabaCloud contains settings specific to the Alibaba
@@ -1076,16 +1094,120 @@ spec:
description: AWS contains settings specific to the Amazon Web
Services infrastructure provider.
properties:
+ cloudLoadBalancerConfig:
+ default:
+ dnsType: PlatformDefault
+ description: |-
+ cloudLoadBalancerConfig holds configuration related to DNS and cloud
+ load balancers. It allows configuration of in-cluster DNS as an alternative
+ to the platform default DNS implementation.
+ When using the ClusterHosted DNS type, Load Balancer IP addresses
+ must be provided for the API and internal API load balancers as well as the
+ ingress load balancer.
+ nullable: true
+ properties:
+ clusterHosted:
+ description: |-
+ clusterHosted holds the IP addresses of API, API-Int and Ingress Load
+ Balancers on Cloud Platforms. The DNS solution hosted within the cluster
+ use these IP addresses to provide resolution for API, API-Int and Ingress
+ services.
+ properties:
+ apiIntLoadBalancerIPs:
+ description: |-
+ apiIntLoadBalancerIPs holds Load Balancer IPs for the internal API service.
+ These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses.
+ Entries in the apiIntLoadBalancerIPs must be unique.
+ A maximum of 16 IP addresses are permitted.
+ format: ip
+ items:
+ description: IP is an IP address (for example, "10.0.0.0"
+ or "fd00::").
+ maxLength: 39
+ minLength: 1
+ type: string
+ x-kubernetes-validations:
+ - message: value must be a valid IP address
+ rule: isIP(self)
+ maxItems: 16
+ type: array
+ x-kubernetes-list-type: set
+ apiLoadBalancerIPs:
+ description: |-
+ apiLoadBalancerIPs holds Load Balancer IPs for the API service.
+ These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses.
+ Could be empty for private clusters.
+ Entries in the apiLoadBalancerIPs must be unique.
+ A maximum of 16 IP addresses are permitted.
+ format: ip
+ items:
+ description: IP is an IP address (for example, "10.0.0.0"
+ or "fd00::").
+ maxLength: 39
+ minLength: 1
+ type: string
+ x-kubernetes-validations:
+ - message: value must be a valid IP address
+ rule: isIP(self)
+ maxItems: 16
+ type: array
+ x-kubernetes-list-type: set
+ ingressLoadBalancerIPs:
+ description: |-
+ ingressLoadBalancerIPs holds IPs for Ingress Load Balancers.
+ These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses.
+ Entries in the ingressLoadBalancerIPs must be unique.
+ A maximum of 16 IP addresses are permitted.
+ format: ip
+ items:
+ description: IP is an IP address (for example, "10.0.0.0"
+ or "fd00::").
+ maxLength: 39
+ minLength: 1
+ type: string
+ x-kubernetes-validations:
+ - message: value must be a valid IP address
+ rule: isIP(self)
+ maxItems: 16
+ type: array
+ x-kubernetes-list-type: set
+ type: object
+ dnsType:
+ default: PlatformDefault
+ description: |-
+ dnsType indicates the type of DNS solution in use within the cluster. Its default value of
+ `PlatformDefault` indicates that the cluster's DNS is the default provided by the cloud platform.
+ It can be set to `ClusterHosted` to bypass the configuration of the cloud default DNS. In this mode,
+ the cluster needs to provide a self-hosted DNS solution for the cluster's installation to succeed.
+ The cluster's use of the cloud's Load Balancers is unaffected by this setting.
+ The value is immutable after it has been set at install time.
+ Currently, there is no way for the customer to add additional DNS entries into the cluster hosted DNS.
+ Enabling this functionality allows the user to start their own DNS solution outside the cluster after
+ installation is complete. The customer would be responsible for configuring this custom DNS solution,
+ and it can be run in addition to the in-cluster DNS solution.
+ enum:
+ - ClusterHosted
+ - PlatformDefault
+ type: string
+ x-kubernetes-validations:
+ - message: dnsType is immutable
+ rule: oldSelf == '' || self == oldSelf
+ type: object
+ x-kubernetes-validations:
+ - message: clusterHosted is permitted only when dnsType is
+ ClusterHosted
+ rule: 'has(self.dnsType) && self.dnsType != ''ClusterHosted''
+ ? !has(self.clusterHosted) : true'
region:
description: region holds the default AWS region for new AWS
resources created by the cluster.
type: string
resourceTags:
- description: resourceTags is a list of additional tags to
- apply to AWS resources created for the cluster. See https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html
- for information on tagging AWS resources. AWS supports a
- maximum of 50 tags per resource. OpenShift reserves 25 tags
- for its use, leaving 25 tags available for the user.
+ description: |-
+ resourceTags is a list of additional tags to apply to AWS resources created for the cluster.
+ See https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html for information on tagging AWS resources.
+ AWS supports a maximum of 50 tags per resource. OpenShift reserves 25 tags for its use, leaving 25 tags
+ available for the user.
items:
description: AWSResourceTag is a tag to apply to AWS resources
created for the cluster.
@@ -1097,10 +1219,10 @@ spec:
pattern: ^[0-9A-Za-z_.:/=+-@]+$
type: string
value:
- description: value is the value of the tag. Some AWS
- service do not support empty values. Since tags are
- added to resources in many services, the length of
- the tag value must meet the requirements of all services.
+ description: |-
+ value is the value of the tag.
+ Some AWS service do not support empty values. Since tags are added to resources in many services, the
+ length of the tag value must meet the requirements of all services.
maxLength: 256
minLength: 1
pattern: ^[0-9A-Za-z_.:/=+-@]+$
@@ -1113,24 +1235,27 @@ spec:
type: array
x-kubernetes-list-type: atomic
serviceEndpoints:
- description: ServiceEndpoints list contains custom endpoints
- which will override default service endpoint of AWS Services.
+ description: |-
+ ServiceEndpoints list contains custom endpoints which will override default
+ service endpoint of AWS Services.
There must be only one ServiceEndpoint for a service.
items:
- description: AWSServiceEndpoint store the configuration
- of a custom url to override existing defaults of AWS Services.
+ description: |-
+ AWSServiceEndpoint store the configuration of a custom url to
+ override existing defaults of AWS Services.
properties:
name:
- description: name is the name of the AWS service. The
- list of all the service names can be found at https://docs.aws.amazon.com/general/latest/gr/aws-service-information.html
+ description: |-
+ name is the name of the AWS service.
+ The list of all the service names can be found at https://docs.aws.amazon.com/general/latest/gr/aws-service-information.html
This must be provided and cannot be empty.
pattern: ^[a-z0-9-]+$
type: string
url:
- description: url is fully qualified URI with scheme
- https, that overrides the default generated endpoint
- for a client. This must be provided and cannot be
- empty.
+ description: |-
+ url is fully qualified URI with scheme https, that overrides the default generated
+ endpoint for a client.
+ This must be provided and cannot be empty.
pattern: ^https://
type: string
type: object
@@ -1146,9 +1271,10 @@ spec:
management in non-soverign clouds such as Azure Stack.
type: string
cloudName:
- description: cloudName is the name of the Azure cloud environment
- which can be used to configure the Azure SDK with the appropriate
- Azure API endpoints. If empty, the value is equal to `AzurePublicCloud`.
+ description: |-
+ cloudName is the name of the Azure cloud environment which can be used to configure the Azure SDK
+ with the appropriate Azure API endpoints.
+ If empty, the value is equal to `AzurePublicCloud`.
enum:
- ""
- AzurePublicCloud
@@ -1158,42 +1284,37 @@ spec:
- AzureStackCloud
type: string
networkResourceGroupName:
- description: networkResourceGroupName is the Resource Group
- for network resources like the Virtual Network and Subnets
- used by the cluster. If empty, the value is same as ResourceGroupName.
+ description: |-
+ networkResourceGroupName is the Resource Group for network resources like the Virtual Network and Subnets used by the cluster.
+ If empty, the value is same as ResourceGroupName.
type: string
resourceGroupName:
description: resourceGroupName is the Resource Group for new
Azure resources created for the cluster.
type: string
resourceTags:
- description: resourceTags is a list of additional tags to
- apply to Azure resources created for the cluster. See https://docs.microsoft.com/en-us/rest/api/resources/tags
- for information on tagging Azure resources. Due to limitations
- on Automation, Content Delivery Network, DNS Azure resources,
- a maximum of 15 tags may be applied. OpenShift reserves
- 5 tags for internal use, allowing 10 tags for user configuration.
+ description: |-
+ resourceTags is a list of additional tags to apply to Azure resources created for the cluster.
+ See https://docs.microsoft.com/en-us/rest/api/resources/tags for information on tagging Azure resources.
+ Due to limitations on Automation, Content Delivery Network, DNS Azure resources, a maximum of 15 tags
+ may be applied. OpenShift reserves 5 tags for internal use, allowing 10 tags for user configuration.
items:
description: AzureResourceTag is a tag to apply to Azure
resources created for the cluster.
properties:
key:
- description: key is the key part of the tag. A tag key
- can have a maximum of 128 characters and cannot be
- empty. Key must begin with a letter, end with a letter,
- number or underscore, and must contain only alphanumeric
- characters and the following special characters `_
- . -`.
+ description: |-
+ key is the key part of the tag. A tag key can have a maximum of 128 characters and cannot be empty. Key
+ must begin with a letter, end with a letter, number or underscore, and must contain only alphanumeric
+ characters and the following special characters `_ . -`.
maxLength: 128
minLength: 1
pattern: ^[a-zA-Z]([0-9A-Za-z_.-]*[0-9A-Za-z_])?$
type: string
value:
- description: 'value is the value part of the tag. A
- tag value can have a maximum of 256 characters and
- cannot be empty. Value must contain only alphanumeric
- characters and the following special characters `_
- + , - . / : ; < = > ? @`.'
+ description: |-
+ value is the value part of the tag. A tag value can have a maximum of 256 characters and cannot be empty. Value
+ must contain only alphanumeric characters and the following special characters `_ + , - . / : ; < = > ? @`.
maxLength: 256
minLength: 1
pattern: ^[0-9A-Za-z_.=+-@]+$
@@ -1219,22 +1340,21 @@ spec:
platform.
properties:
apiServerInternalIP:
- description: "apiServerInternalIP is an IP address to contact
- the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. It is the IP that the
- Infrastructure.status.apiServerInternalURI points to. It
- is the IP for a self-hosted load balancer in front of the
- API servers. \n Deprecated: Use APIServerInternalIPs instead."
+ description: |-
+ apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used
+ by components inside the cluster, like kubelets using the infrastructure rather
+ than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI
+ points to. It is the IP for a self-hosted load balancer in front of the API servers.
+
+ Deprecated: Use APIServerInternalIPs instead.
type: string
apiServerInternalIPs:
- description: apiServerInternalIPs are the IP addresses to
- contact the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. These are the IPs for
- a self-hosted load balancer in front of the API servers.
- In dual stack clusters this list contains two IPs otherwise
- only one.
+ description: |-
+ apiServerInternalIPs are the IP addresses to contact the Kubernetes API
+ server that can be used by components inside the cluster, like kubelets
+ using the infrastructure rather than Kubernetes networking. These are the
+ IPs for a self-hosted load balancer in front of the API servers. In dual
+ stack clusters this list contains two IPs otherwise only one.
format: ip
items:
type: string
@@ -1248,17 +1368,18 @@ spec:
&& isIP(self[1]) ? ip(self[0]).family() != ip(self[1]).family()
: true)'
ingressIP:
- description: "ingressIP is an external IP which routes to
- the default ingress controller. The IP is a suitable target
- of a wildcard DNS record used to resolve default route host
- names. \n Deprecated: Use IngressIPs instead."
+ description: |-
+ ingressIP is an external IP which routes to the default ingress controller.
+ The IP is a suitable target of a wildcard DNS record used to resolve default route host names.
+
+ Deprecated: Use IngressIPs instead.
type: string
ingressIPs:
- description: ingressIPs are the external IPs which route to
- the default ingress controller. The IPs are suitable targets
- of a wildcard DNS record used to resolve default route host
- names. In dual stack clusters this list contains two IPs
- otherwise only one.
+ description: |-
+ ingressIPs are the external IPs which route to the default ingress
+ controller. The IPs are suitable targets of a wildcard DNS record used to
+ resolve default route host names. In dual stack clusters this list
+ contains two IPs otherwise only one.
format: ip
items:
type: string
@@ -1279,18 +1400,16 @@ spec:
properties:
type:
default: OpenShiftManagedDefault
- description: type defines the type of load balancer used
- by the cluster on BareMetal platform which can be a
- user-managed or openshift-managed load balancer that
- is to be used for the OpenShift API and Ingress endpoints.
- When set to OpenShiftManagedDefault the static pods
- in charge of API and Ingress traffic load-balancing
+ description: |-
+ type defines the type of load balancer used by the cluster on BareMetal platform
+ which can be a user-managed or openshift-managed load balancer
+ that is to be used for the OpenShift API and Ingress endpoints.
+ When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing
defined in the machine config operator will be deployed.
- When set to UserManaged these static pods will not be
- deployed and it is expected that the load balancer is
- configured out of band by the deployer. When omitted,
- this means no opinion and the platform is left to choose
- a reasonable default. The default value is OpenShiftManagedDefault.
+ When set to UserManaged these static pods will not be deployed and it is expected that
+ the load balancer is configured out of band by the deployer.
+ When omitted, this means no opinion and the platform is left to choose a reasonable default.
+ The default value is OpenShiftManagedDefault.
enum:
- OpenShiftManagedDefault
- UserManaged
@@ -1317,13 +1436,13 @@ spec:
x-kubernetes-validations:
- rule: self.all(x, self.exists_one(y, x == y))
nodeDNSIP:
- description: nodeDNSIP is the IP address for the internal
- DNS used by the nodes. Unlike the one managed by the DNS
- operator, `NodeDNSIP` provides name resolution for the nodes
- themselves. There is no DNS-as-a-service for BareMetal deployments.
- In order to minimize necessary changes to the datacenter
- DNS, a DNS service is hosted as a static pod to serve those
- hostnames to the nodes in the cluster.
+ description: |-
+ nodeDNSIP is the IP address for the internal DNS used by the
+ nodes. Unlike the one managed by the DNS operator, `NodeDNSIP`
+ provides name resolution for the nodes themselves. There is no DNS-as-a-service for
+ BareMetal deployments. In order to minimize necessary changes to the
+ datacenter DNS, a DNS service is hosted as a static pod to serve those hostnames
+ to the nodes in the cluster.
type: string
type: object
equinixMetal:
@@ -1331,19 +1450,16 @@ spec:
Metal infrastructure provider.
properties:
apiServerInternalIP:
- description: apiServerInternalIP is an IP address to contact
- the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. It is the IP that the
- Infrastructure.status.apiServerInternalURI points to. It
- is the IP for a self-hosted load balancer in front of the
- API servers.
+ description: |-
+ apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used
+ by components inside the cluster, like kubelets using the infrastructure rather
+ than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI
+ points to. It is the IP for a self-hosted load balancer in front of the API servers.
type: string
ingressIP:
- description: ingressIP is an external IP which routes to the
- default ingress controller. The IP is a suitable target
- of a wildcard DNS record used to resolve default route host
- names.
+ description: |-
+ ingressIP is an external IP which routes to the default ingress controller.
+ The IP is a suitable target of a wildcard DNS record used to resolve default route host names.
type: string
type: object
external:
@@ -1351,23 +1467,22 @@ spec:
External infrastructure provider.
properties:
cloudControllerManager:
- description: cloudControllerManager contains settings specific
- to the external Cloud Controller Manager (a.k.a. CCM or
- CPI). When omitted, new nodes will be not tainted and no
- extra initialization from the cloud controller manager is
- expected.
+ description: |-
+ cloudControllerManager contains settings specific to the external Cloud Controller Manager (a.k.a. CCM or CPI).
+ When omitted, new nodes will be not tainted
+ and no extra initialization from the cloud controller manager is expected.
properties:
state:
- description: "state determines whether or not an external
- Cloud Controller Manager is expected to be installed
- within the cluster. https://kubernetes.io/docs/tasks/administer-cluster/running-cloud-controller/#running-cloud-controller-manager
- \n Valid values are \"External\", \"None\" and omitted.
- When set to \"External\", new nodes will be tainted
- as uninitialized when created, preventing them from
- running workloads until they are initialized by the
- cloud controller manager. When omitted or set to \"None\",
- new nodes will be not tainted and no extra initialization
- from the cloud controller manager is expected."
+ description: |-
+ state determines whether or not an external Cloud Controller Manager is expected to
+ be installed within the cluster.
+ https://kubernetes.io/docs/tasks/administer-cluster/running-cloud-controller/#running-cloud-controller-manager
+
+ Valid values are "External", "None" and omitted.
+ When set to "External", new nodes will be tainted as uninitialized when created,
+ preventing them from running workloads until they are initialized by the cloud controller manager.
+ When omitted or set to "None", new nodes will be not tainted
+ and no extra initialization from the cloud controller manager is expected.
enum:
- ""
- External
@@ -1393,27 +1508,26 @@ spec:
cloudLoadBalancerConfig:
default:
dnsType: PlatformDefault
- description: cloudLoadBalancerConfig is a union that contains
- the IP addresses of API, API-Int and Ingress Load Balancers
- created on the cloud platform. These values would not be
- populated on on-prem platforms. These Load Balancer IPs
- are used to configure the in-cluster DNS instances for API,
- API-Int and Ingress services. `dnsType` is expected to be
- set to `ClusterHosted` when these Load Balancer IP addresses
- are populated and used.
+ description: |-
+ cloudLoadBalancerConfig holds configuration related to DNS and cloud
+ load balancers. It allows configuration of in-cluster DNS as an alternative
+ to the platform default DNS implementation.
+ When using the ClusterHosted DNS type, Load Balancer IP addresses
+ must be provided for the API and internal API load balancers as well as the
+ ingress load balancer.
nullable: true
properties:
clusterHosted:
- description: clusterHosted holds the IP addresses of API,
- API-Int and Ingress Load Balancers on Cloud Platforms.
- The DNS solution hosted within the cluster use these
- IP addresses to provide resolution for API, API-Int
- and Ingress services.
+ description: |-
+ clusterHosted holds the IP addresses of API, API-Int and Ingress Load
+ Balancers on Cloud Platforms. The DNS solution hosted within the cluster
+ use these IP addresses to provide resolution for API, API-Int and Ingress
+ services.
properties:
apiIntLoadBalancerIPs:
- description: apiIntLoadBalancerIPs holds Load Balancer
- IPs for the internal API service. These Load Balancer
- IP addresses can be IPv4 and/or IPv6 addresses.
+ description: |-
+ apiIntLoadBalancerIPs holds Load Balancer IPs for the internal API service.
+ These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses.
Entries in the apiIntLoadBalancerIPs must be unique.
A maximum of 16 IP addresses are permitted.
format: ip
@@ -1430,12 +1544,12 @@ spec:
type: array
x-kubernetes-list-type: set
apiLoadBalancerIPs:
- description: apiLoadBalancerIPs holds Load Balancer
- IPs for the API service. These Load Balancer IP
- addresses can be IPv4 and/or IPv6 addresses. Could
- be empty for private clusters. Entries in the apiLoadBalancerIPs
- must be unique. A maximum of 16 IP addresses are
- permitted.
+ description: |-
+ apiLoadBalancerIPs holds Load Balancer IPs for the API service.
+ These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses.
+ Could be empty for private clusters.
+ Entries in the apiLoadBalancerIPs must be unique.
+ A maximum of 16 IP addresses are permitted.
format: ip
items:
description: IP is an IP address (for example, "10.0.0.0"
@@ -1450,11 +1564,11 @@ spec:
type: array
x-kubernetes-list-type: set
ingressLoadBalancerIPs:
- description: ingressLoadBalancerIPs holds IPs for
- Ingress Load Balancers. These Load Balancer IP addresses
- can be IPv4 and/or IPv6 addresses. Entries in the
- ingressLoadBalancerIPs must be unique. A maximum
- of 16 IP addresses are permitted.
+ description: |-
+ ingressLoadBalancerIPs holds IPs for Ingress Load Balancers.
+ These Load Balancer IP addresses can be IPv4 and/or IPv6 addresses.
+ Entries in the ingressLoadBalancerIPs must be unique.
+ A maximum of 16 IP addresses are permitted.
format: ip
items:
description: IP is an IP address (for example, "10.0.0.0"
@@ -1471,23 +1585,17 @@ spec:
type: object
dnsType:
default: PlatformDefault
- description: dnsType indicates the type of DNS solution
- in use within the cluster. Its default value of `PlatformDefault`
- indicates that the cluster's DNS is the default provided
- by the cloud platform. It can be set to `ClusterHosted`
- to bypass the configuration of the cloud default DNS.
- In this mode, the cluster needs to provide a self-hosted
- DNS solution for the cluster's installation to succeed.
- The cluster's use of the cloud's Load Balancers is unaffected
- by this setting. The value is immutable after it has
- been set at install time. Currently, there is no way
- for the customer to add additional DNS entries into
- the cluster hosted DNS. Enabling this functionality
- allows the user to start their own DNS solution outside
- the cluster after installation is complete. The customer
- would be responsible for configuring this custom DNS
- solution, and it can be run in addition to the in-cluster
- DNS solution.
+ description: |-
+ dnsType indicates the type of DNS solution in use within the cluster. Its default value of
+ `PlatformDefault` indicates that the cluster's DNS is the default provided by the cloud platform.
+ It can be set to `ClusterHosted` to bypass the configuration of the cloud default DNS. In this mode,
+ the cluster needs to provide a self-hosted DNS solution for the cluster's installation to succeed.
+ The cluster's use of the cloud's Load Balancers is unaffected by this setting.
+ The value is immutable after it has been set at install time.
+ Currently, there is no way for the customer to add additional DNS entries into the cluster hosted DNS.
+ Enabling this functionality allows the user to start their own DNS solution outside the cluster after
+ installation is complete. The customer would be responsible for configuring this custom DNS solution,
+ and it can be run in addition to the in-cluster DNS solution.
enum:
- ClusterHosted
- PlatformDefault
@@ -1510,23 +1618,20 @@ spec:
created for the cluster.
type: string
resourceLabels:
- description: resourceLabels is a list of additional labels
- to apply to GCP resources created for the cluster. See https://cloud.google.com/compute/docs/labeling-resources
- for information on labeling GCP resources. GCP supports
- a maximum of 64 labels per resource. OpenShift reserves
- 32 labels for internal use, allowing 32 labels for user
- configuration.
+ description: |-
+ resourceLabels is a list of additional labels to apply to GCP resources created for the cluster.
+ See https://cloud.google.com/compute/docs/labeling-resources for information on labeling GCP resources.
+ GCP supports a maximum of 64 labels per resource. OpenShift reserves 32 labels for internal use,
+ allowing 32 labels for user configuration.
items:
description: GCPResourceLabel is a label to apply to GCP
resources created for the cluster.
properties:
key:
- description: key is the key part of the label. A label
- key can have a maximum of 63 characters and cannot
- be empty. Label key must begin with a lowercase letter,
- and must contain only lowercase letters, numeric characters,
- and the following special characters `_-`. Label key
- must not have the reserved prefixes `kubernetes-io`
+ description: |-
+ key is the key part of the label. A label key can have a maximum of 63 characters and cannot be empty.
+ Label key must begin with a lowercase letter, and must contain only lowercase letters, numeric characters,
+ and the following special characters `_-`. Label key must not have the reserved prefixes `kubernetes-io`
and `openshift-io`.
maxLength: 63
minLength: 1
@@ -1537,11 +1642,9 @@ spec:
or `kubernetes-io`
rule: '!self.startsWith(''openshift-io'') && !self.startsWith(''kubernetes-io'')'
value:
- description: value is the value part of the label. A
- label value can have a maximum of 63 characters and
- cannot be empty. Value must contain only lowercase
- letters, numeric characters, and the following special
- characters `_-`.
+ description: |-
+ value is the value part of the label. A label value can have a maximum of 63 characters and cannot be empty.
+ Value must contain only lowercase letters, numeric characters, and the following special characters `_-`.
maxLength: 63
minLength: 1
pattern: ^[0-9a-z_-]{1,63}$
@@ -1560,47 +1663,41 @@ spec:
during installation
rule: self.all(x, x in oldSelf) && oldSelf.all(x, x in self)
resourceTags:
- description: resourceTags is a list of additional tags to
- apply to GCP resources created for the cluster. See https://cloud.google.com/resource-manager/docs/tags/tags-overview
- for information on tagging GCP resources. GCP supports a
- maximum of 50 tags per resource.
+ description: |-
+ resourceTags is a list of additional tags to apply to GCP resources created for the cluster.
+ See https://cloud.google.com/resource-manager/docs/tags/tags-overview for information on
+ tagging GCP resources. GCP supports a maximum of 50 tags per resource.
items:
description: GCPResourceTag is a tag to apply to GCP resources
created for the cluster.
properties:
key:
- description: key is the key part of the tag. A tag key
- can have a maximum of 63 characters and cannot be
- empty. Tag key must begin and end with an alphanumeric
- character, and must contain only uppercase, lowercase
- alphanumeric characters, and the following special
- characters `._-`.
+ description: |-
+ key is the key part of the tag. A tag key can have a maximum of 63 characters and cannot be empty.
+ Tag key must begin and end with an alphanumeric character, and must contain only uppercase, lowercase
+ alphanumeric characters, and the following special characters `._-`.
maxLength: 63
minLength: 1
pattern: ^[a-zA-Z0-9]([0-9A-Za-z_.-]{0,61}[a-zA-Z0-9])?$
type: string
parentID:
- description: 'parentID is the ID of the hierarchical
- resource where the tags are defined, e.g. at the Organization
- or the Project level. To find the Organization or
- Project ID refer to the following pages: https://cloud.google.com/resource-manager/docs/creating-managing-organization#retrieving_your_organization_id,
+ description: |-
+ parentID is the ID of the hierarchical resource where the tags are defined,
+ e.g. at the Organization or the Project level. To find the Organization or Project ID refer to the following pages:
+ https://cloud.google.com/resource-manager/docs/creating-managing-organization#retrieving_your_organization_id,
https://cloud.google.com/resource-manager/docs/creating-managing-projects#identifying_projects.
- An OrganizationID must consist of decimal numbers,
- and cannot have leading zeroes. A ProjectID must be
- 6 to 30 characters in length, can only contain lowercase
- letters, numbers, and hyphens, and must start with
- a letter, and cannot end with a hyphen.'
+ An OrganizationID must consist of decimal numbers, and cannot have leading zeroes.
+ A ProjectID must be 6 to 30 characters in length, can only contain lowercase letters, numbers,
+ and hyphens, and must start with a letter, and cannot end with a hyphen.
maxLength: 32
minLength: 1
pattern: (^[1-9][0-9]{0,31}$)|(^[a-z][a-z0-9-]{4,28}[a-z0-9]$)
type: string
value:
- description: value is the value part of the tag. A tag
- value can have a maximum of 63 characters and cannot
- be empty. Tag value must begin and end with an alphanumeric
- character, and must contain only uppercase, lowercase
- alphanumeric characters, and the following special
- characters `_-.@%=+:,*#&(){}[]` and spaces.
+ description: |-
+ value is the value part of the tag. A tag value can have a maximum of 63 characters and cannot be empty.
+ Tag value must begin and end with an alphanumeric character, and must contain only uppercase, lowercase
+ alphanumeric characters, and the following special characters `_-.@%=+:,*#&(){}[]` and spaces.
maxLength: 63
minLength: 1
pattern: ^[a-zA-Z0-9]([0-9A-Za-z_.@%=+:,*#&()\[\]{}\-\s]{0,61}[a-zA-Z0-9])?$
@@ -1632,13 +1729,14 @@ spec:
infrastructure provider.
properties:
cisInstanceCRN:
- description: CISInstanceCRN is the CRN of the Cloud Internet
- Services instance managing the DNS zone for the cluster's
- base domain
+ description: |-
+ CISInstanceCRN is the CRN of the Cloud Internet Services instance managing
+ the DNS zone for the cluster's base domain
type: string
dnsInstanceCRN:
- description: DNSInstanceCRN is the CRN of the DNS Services
- instance managing the DNS zone for the cluster's base domain
+ description: |-
+ DNSInstanceCRN is the CRN of the DNS Services instance managing the DNS zone
+ for the cluster's base domain
type: string
location:
description: Location is where the cluster has been deployed
@@ -1652,26 +1750,23 @@ spec:
IBMCloud resources created for the cluster.
type: string
serviceEndpoints:
- description: serviceEndpoints is a list of custom endpoints
- which will override the default service endpoints of an
- IBM Cloud service. These endpoints are consumed by components
- within the cluster to reach the respective IBM Cloud Services.
+ description: |-
+ serviceEndpoints is a list of custom endpoints which will override the default
+ service endpoints of an IBM Cloud service. These endpoints are consumed by
+ components within the cluster to reach the respective IBM Cloud Services.
items:
- description: IBMCloudServiceEndpoint stores the configuration
- of a custom url to override existing defaults of IBM Cloud
- Services.
+ description: |-
+ IBMCloudServiceEndpoint stores the configuration of a custom url to
+ override existing defaults of IBM Cloud Services.
properties:
name:
- description: 'name is the name of the IBM Cloud service.
- Possible values are: CIS, COS, COSConfig, DNSServices,
- GlobalCatalog, GlobalSearch, GlobalTagging, HyperProtect,
- IAM, KeyProtect, ResourceController, ResourceManager,
- or VPC. For example, the IBM Cloud Private IAM service
- could be configured with the service `name` of `IAM`
- and `url` of `https://private.iam.cloud.ibm.com` Whereas
- the IBM Cloud Private VPC service for US South (Dallas)
- could be configured with the service `name` of `VPC`
- and `url` of `https://us.south.private.iaas.cloud.ibm.com`'
+ description: |-
+ name is the name of the IBM Cloud service.
+ Possible values are: CIS, COS, COSConfig, DNSServices, GlobalCatalog, GlobalSearch, GlobalTagging, HyperProtect, IAM, KeyProtect, ResourceController, ResourceManager, or VPC.
+ For example, the IBM Cloud Private IAM service could be configured with the
+ service `name` of `IAM` and `url` of `https://private.iam.cloud.ibm.com`
+ Whereas the IBM Cloud Private VPC service for US South (Dallas) could be configured
+ with the service `name` of `VPC` and `url` of `https://us.south.private.iaas.cloud.ibm.com`
enum:
- CIS
- COS
@@ -1688,10 +1783,10 @@ spec:
- VPC
type: string
url:
- description: url is fully qualified URI with scheme
- https, that overrides the default generated endpoint
- for a client. This must be provided and cannot be
- empty.
+ description: |-
+ url is fully qualified URI with scheme https, that overrides the default generated
+ endpoint for a client.
+ This must be provided and cannot be empty.
type: string
x-kubernetes-validations:
- message: url must be a valid absolute URL
@@ -1710,19 +1805,16 @@ spec:
infrastructure provider.
properties:
apiServerInternalIP:
- description: apiServerInternalIP is an IP address to contact
- the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. It is the IP that the
- Infrastructure.status.apiServerInternalURI points to. It
- is the IP for a self-hosted load balancer in front of the
- API servers.
+ description: |-
+ apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used
+ by components inside the cluster, like kubelets using the infrastructure rather
+ than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI
+ points to. It is the IP for a self-hosted load balancer in front of the API servers.
type: string
ingressIP:
- description: ingressIP is an external IP which routes to the
- default ingress controller. The IP is a suitable target
- of a wildcard DNS record used to resolve default route host
- names.
+ description: |-
+ ingressIP is an external IP which routes to the default ingress controller.
+ The IP is a suitable target of a wildcard DNS record used to resolve default route host names.
type: string
type: object
nutanix:
@@ -1730,22 +1822,21 @@ spec:
infrastructure provider.
properties:
apiServerInternalIP:
- description: "apiServerInternalIP is an IP address to contact
- the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. It is the IP that the
- Infrastructure.status.apiServerInternalURI points to. It
- is the IP for a self-hosted load balancer in front of the
- API servers. \n Deprecated: Use APIServerInternalIPs instead."
+ description: |-
+ apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used
+ by components inside the cluster, like kubelets using the infrastructure rather
+ than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI
+ points to. It is the IP for a self-hosted load balancer in front of the API servers.
+
+ Deprecated: Use APIServerInternalIPs instead.
type: string
apiServerInternalIPs:
- description: apiServerInternalIPs are the IP addresses to
- contact the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. These are the IPs for
- a self-hosted load balancer in front of the API servers.
- In dual stack clusters this list contains two IPs otherwise
- only one.
+ description: |-
+ apiServerInternalIPs are the IP addresses to contact the Kubernetes API
+ server that can be used by components inside the cluster, like kubelets
+ using the infrastructure rather than Kubernetes networking. These are the
+ IPs for a self-hosted load balancer in front of the API servers. In dual
+ stack clusters this list contains two IPs otherwise only one.
format: ip
items:
type: string
@@ -1759,17 +1850,18 @@ spec:
&& isIP(self[1]) ? ip(self[0]).family() != ip(self[1]).family()
: true)'
ingressIP:
- description: "ingressIP is an external IP which routes to
- the default ingress controller. The IP is a suitable target
- of a wildcard DNS record used to resolve default route host
- names. \n Deprecated: Use IngressIPs instead."
+ description: |-
+ ingressIP is an external IP which routes to the default ingress controller.
+ The IP is a suitable target of a wildcard DNS record used to resolve default route host names.
+
+ Deprecated: Use IngressIPs instead.
type: string
ingressIPs:
- description: ingressIPs are the external IPs which route to
- the default ingress controller. The IPs are suitable targets
- of a wildcard DNS record used to resolve default route host
- names. In dual stack clusters this list contains two IPs
- otherwise only one.
+ description: |-
+ ingressIPs are the external IPs which route to the default ingress
+ controller. The IPs are suitable targets of a wildcard DNS record used to
+ resolve default route host names. In dual stack clusters this list
+ contains two IPs otherwise only one.
format: ip
items:
type: string
@@ -1790,18 +1882,16 @@ spec:
properties:
type:
default: OpenShiftManagedDefault
- description: type defines the type of load balancer used
- by the cluster on Nutanix platform which can be a user-managed
- or openshift-managed load balancer that is to be used
- for the OpenShift API and Ingress endpoints. When set
- to OpenShiftManagedDefault the static pods in charge
- of API and Ingress traffic load-balancing defined in
- the machine config operator will be deployed. When set
- to UserManaged these static pods will not be deployed
- and it is expected that the load balancer is configured
- out of band by the deployer. When omitted, this means
- no opinion and the platform is left to choose a reasonable
- default. The default value is OpenShiftManagedDefault.
+ description: |-
+ type defines the type of load balancer used by the cluster on Nutanix platform
+ which can be a user-managed or openshift-managed load balancer
+ that is to be used for the OpenShift API and Ingress endpoints.
+ When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing
+ defined in the machine config operator will be deployed.
+ When set to UserManaged these static pods will not be deployed and it is expected that
+ the load balancer is configured out of band by the deployer.
+ When omitted, this means no opinion and the platform is left to choose a reasonable default.
+ The default value is OpenShiftManagedDefault.
enum:
- OpenShiftManagedDefault
- UserManaged
@@ -1816,22 +1906,21 @@ spec:
infrastructure provider.
properties:
apiServerInternalIP:
- description: "apiServerInternalIP is an IP address to contact
- the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. It is the IP that the
- Infrastructure.status.apiServerInternalURI points to. It
- is the IP for a self-hosted load balancer in front of the
- API servers. \n Deprecated: Use APIServerInternalIPs instead."
+ description: |-
+ apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used
+ by components inside the cluster, like kubelets using the infrastructure rather
+ than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI
+ points to. It is the IP for a self-hosted load balancer in front of the API servers.
+
+ Deprecated: Use APIServerInternalIPs instead.
type: string
apiServerInternalIPs:
- description: apiServerInternalIPs are the IP addresses to
- contact the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. These are the IPs for
- a self-hosted load balancer in front of the API servers.
- In dual stack clusters this list contains two IPs otherwise
- only one.
+ description: |-
+ apiServerInternalIPs are the IP addresses to contact the Kubernetes API
+ server that can be used by components inside the cluster, like kubelets
+ using the infrastructure rather than Kubernetes networking. These are the
+ IPs for a self-hosted load balancer in front of the API servers. In dual
+ stack clusters this list contains two IPs otherwise only one.
format: ip
items:
type: string
@@ -1845,21 +1934,23 @@ spec:
&& isIP(self[1]) ? ip(self[0]).family() != ip(self[1]).family()
: true)'
cloudName:
- description: cloudName is the name of the desired OpenStack
- cloud in the client configuration file (`clouds.yaml`).
+ description: |-
+ cloudName is the name of the desired OpenStack cloud in the
+ client configuration file (`clouds.yaml`).
type: string
ingressIP:
- description: "ingressIP is an external IP which routes to
- the default ingress controller. The IP is a suitable target
- of a wildcard DNS record used to resolve default route host
- names. \n Deprecated: Use IngressIPs instead."
+ description: |-
+ ingressIP is an external IP which routes to the default ingress controller.
+ The IP is a suitable target of a wildcard DNS record used to resolve default route host names.
+
+ Deprecated: Use IngressIPs instead.
type: string
ingressIPs:
- description: ingressIPs are the external IPs which route to
- the default ingress controller. The IPs are suitable targets
- of a wildcard DNS record used to resolve default route host
- names. In dual stack clusters this list contains two IPs
- otherwise only one.
+ description: |-
+ ingressIPs are the external IPs which route to the default ingress
+ controller. The IPs are suitable targets of a wildcard DNS record used to
+ resolve default route host names. In dual stack clusters this list
+ contains two IPs otherwise only one.
format: ip
items:
type: string
@@ -1880,18 +1971,16 @@ spec:
properties:
type:
default: OpenShiftManagedDefault
- description: type defines the type of load balancer used
- by the cluster on OpenStack platform which can be a
- user-managed or openshift-managed load balancer that
- is to be used for the OpenShift API and Ingress endpoints.
- When set to OpenShiftManagedDefault the static pods
- in charge of API and Ingress traffic load-balancing
+ description: |-
+ type defines the type of load balancer used by the cluster on OpenStack platform
+ which can be a user-managed or openshift-managed load balancer
+ that is to be used for the OpenShift API and Ingress endpoints.
+ When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing
defined in the machine config operator will be deployed.
- When set to UserManaged these static pods will not be
- deployed and it is expected that the load balancer is
- configured out of band by the deployer. When omitted,
- this means no opinion and the platform is left to choose
- a reasonable default. The default value is OpenShiftManagedDefault.
+ When set to UserManaged these static pods will not be deployed and it is expected that
+ the load balancer is configured out of band by the deployer.
+ When omitted, this means no opinion and the platform is left to choose a reasonable default.
+ The default value is OpenShiftManagedDefault.
enum:
- OpenShiftManagedDefault
- UserManaged
@@ -1918,13 +2007,13 @@ spec:
x-kubernetes-validations:
- rule: self.all(x, self.exists_one(y, x == y))
nodeDNSIP:
- description: nodeDNSIP is the IP address for the internal
- DNS used by the nodes. Unlike the one managed by the DNS
- operator, `NodeDNSIP` provides name resolution for the nodes
- themselves. There is no DNS-as-a-service for OpenStack deployments.
- In order to minimize necessary changes to the datacenter
- DNS, a DNS service is hosted as a static pod to serve those
- hostnames to the nodes in the cluster.
+ description: |-
+ nodeDNSIP is the IP address for the internal DNS used by the
+ nodes. Unlike the one managed by the DNS operator, `NodeDNSIP`
+ provides name resolution for the nodes themselves. There is no DNS-as-a-service for
+ OpenStack deployments. In order to minimize necessary changes to the
+ datacenter DNS, a DNS service is hosted as a static pod to serve those hostnames
+ to the nodes in the cluster.
type: string
type: object
ovirt:
@@ -1932,22 +2021,21 @@ spec:
provider.
properties:
apiServerInternalIP:
- description: "apiServerInternalIP is an IP address to contact
- the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. It is the IP that the
- Infrastructure.status.apiServerInternalURI points to. It
- is the IP for a self-hosted load balancer in front of the
- API servers. \n Deprecated: Use APIServerInternalIPs instead."
+ description: |-
+ apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used
+ by components inside the cluster, like kubelets using the infrastructure rather
+ than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI
+ points to. It is the IP for a self-hosted load balancer in front of the API servers.
+
+ Deprecated: Use APIServerInternalIPs instead.
type: string
apiServerInternalIPs:
- description: apiServerInternalIPs are the IP addresses to
- contact the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. These are the IPs for
- a self-hosted load balancer in front of the API servers.
- In dual stack clusters this list contains two IPs otherwise
- only one.
+ description: |-
+ apiServerInternalIPs are the IP addresses to contact the Kubernetes API
+ server that can be used by components inside the cluster, like kubelets
+ using the infrastructure rather than Kubernetes networking. These are the
+ IPs for a self-hosted load balancer in front of the API servers. In dual
+ stack clusters this list contains two IPs otherwise only one.
format: ip
items:
type: string
@@ -1961,17 +2049,18 @@ spec:
&& isIP(self[1]) ? ip(self[0]).family() != ip(self[1]).family()
: true)'
ingressIP:
- description: "ingressIP is an external IP which routes to
- the default ingress controller. The IP is a suitable target
- of a wildcard DNS record used to resolve default route host
- names. \n Deprecated: Use IngressIPs instead."
+ description: |-
+ ingressIP is an external IP which routes to the default ingress controller.
+ The IP is a suitable target of a wildcard DNS record used to resolve default route host names.
+
+ Deprecated: Use IngressIPs instead.
type: string
ingressIPs:
- description: ingressIPs are the external IPs which route to
- the default ingress controller. The IPs are suitable targets
- of a wildcard DNS record used to resolve default route host
- names. In dual stack clusters this list contains two IPs
- otherwise only one.
+ description: |-
+ ingressIPs are the external IPs which route to the default ingress
+ controller. The IPs are suitable targets of a wildcard DNS record used to
+ resolve default route host names. In dual stack clusters this list
+ contains two IPs otherwise only one.
format: ip
items:
type: string
@@ -1992,18 +2081,16 @@ spec:
properties:
type:
default: OpenShiftManagedDefault
- description: type defines the type of load balancer used
- by the cluster on Ovirt platform which can be a user-managed
- or openshift-managed load balancer that is to be used
- for the OpenShift API and Ingress endpoints. When set
- to OpenShiftManagedDefault the static pods in charge
- of API and Ingress traffic load-balancing defined in
- the machine config operator will be deployed. When set
- to UserManaged these static pods will not be deployed
- and it is expected that the load balancer is configured
- out of band by the deployer. When omitted, this means
- no opinion and the platform is left to choose a reasonable
- default. The default value is OpenShiftManagedDefault.
+ description: |-
+ type defines the type of load balancer used by the cluster on Ovirt platform
+ which can be a user-managed or openshift-managed load balancer
+ that is to be used for the OpenShift API and Ingress endpoints.
+ When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing
+ defined in the machine config operator will be deployed.
+ When set to UserManaged these static pods will not be deployed and it is expected that
+ the load balancer is configured out of band by the deployer.
+ When omitted, this means no opinion and the platform is left to choose a reasonable default.
+ The default value is OpenShiftManagedDefault.
enum:
- OpenShiftManagedDefault
- UserManaged
@@ -2022,27 +2109,26 @@ spec:
Virtual Servers infrastructure provider.
properties:
cisInstanceCRN:
- description: CISInstanceCRN is the CRN of the Cloud Internet
- Services instance managing the DNS zone for the cluster's
- base domain
+ description: |-
+ CISInstanceCRN is the CRN of the Cloud Internet Services instance managing
+ the DNS zone for the cluster's base domain
type: string
dnsInstanceCRN:
- description: DNSInstanceCRN is the CRN of the DNS Services
- instance managing the DNS zone for the cluster's base domain
+ description: |-
+ DNSInstanceCRN is the CRN of the DNS Services instance managing the DNS zone
+ for the cluster's base domain
type: string
region:
description: region holds the default Power VS region for
new Power VS resources created by the cluster.
type: string
resourceGroup:
- description: 'resourceGroup is the resource group name for
- new IBMCloud resources created for a cluster. The resource
- group specified here will be used by cluster-image-registry-operator
- to set up a COS Instance in IBMCloud for the cluster registry.
+ description: |-
+ resourceGroup is the resource group name for new IBMCloud resources created for a cluster.
+ The resource group specified here will be used by cluster-image-registry-operator to set up a COS Instance in IBMCloud for the cluster registry.
More about resource groups can be found here: https://cloud.ibm.com/docs/account?topic=account-rgs.
- When omitted, the image registry operator won''t be able
- to configure storage, which results in the image registry
- cluster operator not being in an available state.'
+ When omitted, the image registry operator won't be able to configure storage,
+ which results in the image registry cluster operator not being in an available state.
maxLength: 40
pattern: ^[a-zA-Z0-9-_ ]+$
type: string
@@ -2050,26 +2136,42 @@ spec:
- message: resourceGroup is immutable once set
rule: oldSelf == '' || self == oldSelf
serviceEndpoints:
- description: serviceEndpoints is a list of custom endpoints
- which will override the default service endpoints of a Power
- VS service.
+ description: |-
+ serviceEndpoints is a list of custom endpoints which will override the default
+ service endpoints of a Power VS service.
items:
- description: PowervsServiceEndpoint stores the configuration
- of a custom url to override existing defaults of PowerVS
- Services.
+ description: |-
+ PowervsServiceEndpoint stores the configuration of a custom url to
+ override existing defaults of PowerVS Services.
properties:
name:
- description: name is the name of the Power VS service.
- Few of the services are IAM - https://cloud.ibm.com/apidocs/iam-identity-token-api
+ description: |-
+ name is the name of the Power VS service.
+ Few of the services are
+ IAM - https://cloud.ibm.com/apidocs/iam-identity-token-api
ResourceController - https://cloud.ibm.com/apidocs/resource-controller/resource-controller
Power Cloud - https://cloud.ibm.com/apidocs/power-cloud
- pattern: ^[a-z0-9-]+$
+ enum:
+ - CIS
+ - COS
+ - COSConfig
+ - DNSServices
+ - GlobalCatalog
+ - GlobalSearch
+ - GlobalTagging
+ - HyperProtect
+ - IAM
+ - KeyProtect
+ - Power
+ - ResourceController
+ - ResourceManager
+ - VPC
type: string
url:
- description: url is fully qualified URI with scheme
- https, that overrides the default generated endpoint
- for a client. This must be provided and cannot be
- empty.
+ description: |-
+ url is fully qualified URI with scheme https, that overrides the default generated
+ endpoint for a client.
+ This must be provided and cannot be empty.
format: uri
pattern: ^https://
type: string
@@ -2082,27 +2184,27 @@ spec:
- name
x-kubernetes-list-type: map
zone:
- description: 'zone holds the default zone for the new Power
- VS resources created by the cluster. Note: Currently only
- single-zone OCP clusters are supported'
+ description: |-
+ zone holds the default zone for the new Power VS resources created by the cluster.
+ Note: Currently only single-zone OCP clusters are supported
type: string
type: object
x-kubernetes-validations:
- message: cannot unset resourceGroup once set
rule: '!has(oldSelf.resourceGroup) || has(self.resourceGroup)'
type:
- description: "type is the underlying infrastructure provider for
- the cluster. This value controls whether infrastructure automation
- such as service load balancers, dynamic volume provisioning,
- machine creation and deletion, and other integrations are enabled.
- If None, no infrastructure automation is enabled. Allowed values
- are \"AWS\", \"Azure\", \"BareMetal\", \"GCP\", \"Libvirt\",
- \"OpenStack\", \"VSphere\", \"oVirt\", \"EquinixMetal\", \"PowerVS\",
- \"AlibabaCloud\", \"Nutanix\" and \"None\". Individual components
- may not support all platforms, and must handle unrecognized
- platforms as None if they do not support that platform. \n This
- value will be synced with to the `status.platform` and `status.platformStatus.type`.
- Currently this value cannot be changed once set."
+ description: |-
+ type is the underlying infrastructure provider for the cluster. This
+ value controls whether infrastructure automation such as service load
+ balancers, dynamic volume provisioning, machine creation and deletion, and
+ other integrations are enabled. If None, no infrastructure automation is
+ enabled. Allowed values are "AWS", "Azure", "BareMetal", "GCP", "Libvirt",
+ "OpenStack", "VSphere", "oVirt", "EquinixMetal", "PowerVS", "AlibabaCloud", "Nutanix" and "None".
+ Individual components may not support all platforms, and must handle
+ unrecognized platforms as None if they do not support that platform.
+
+ This value will be synced with to the `status.platform` and `status.platformStatus.type`.
+ Currently this value cannot be changed once set.
enum:
- ""
- AWS
@@ -2127,22 +2229,21 @@ spec:
infrastructure provider.
properties:
apiServerInternalIP:
- description: "apiServerInternalIP is an IP address to contact
- the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. It is the IP that the
- Infrastructure.status.apiServerInternalURI points to. It
- is the IP for a self-hosted load balancer in front of the
- API servers. \n Deprecated: Use APIServerInternalIPs instead."
+ description: |-
+ apiServerInternalIP is an IP address to contact the Kubernetes API server that can be used
+ by components inside the cluster, like kubelets using the infrastructure rather
+ than Kubernetes networking. It is the IP that the Infrastructure.status.apiServerInternalURI
+ points to. It is the IP for a self-hosted load balancer in front of the API servers.
+
+ Deprecated: Use APIServerInternalIPs instead.
type: string
apiServerInternalIPs:
- description: apiServerInternalIPs are the IP addresses to
- contact the Kubernetes API server that can be used by components
- inside the cluster, like kubelets using the infrastructure
- rather than Kubernetes networking. These are the IPs for
- a self-hosted load balancer in front of the API servers.
- In dual stack clusters this list contains two IPs otherwise
- only one.
+ description: |-
+ apiServerInternalIPs are the IP addresses to contact the Kubernetes API
+ server that can be used by components inside the cluster, like kubelets
+ using the infrastructure rather than Kubernetes networking. These are the
+ IPs for a self-hosted load balancer in front of the API servers. In dual
+ stack clusters this list contains two IPs otherwise only one.
format: ip
items:
type: string
@@ -2156,17 +2257,18 @@ spec:
&& isIP(self[1]) ? ip(self[0]).family() != ip(self[1]).family()
: true)'
ingressIP:
- description: "ingressIP is an external IP which routes to
- the default ingress controller. The IP is a suitable target
- of a wildcard DNS record used to resolve default route host
- names. \n Deprecated: Use IngressIPs instead."
+ description: |-
+ ingressIP is an external IP which routes to the default ingress controller.
+ The IP is a suitable target of a wildcard DNS record used to resolve default route host names.
+
+ Deprecated: Use IngressIPs instead.
type: string
ingressIPs:
- description: ingressIPs are the external IPs which route to
- the default ingress controller. The IPs are suitable targets
- of a wildcard DNS record used to resolve default route host
- names. In dual stack clusters this list contains two IPs
- otherwise only one.
+ description: |-
+ ingressIPs are the external IPs which route to the default ingress
+ controller. The IPs are suitable targets of a wildcard DNS record used to
+ resolve default route host names. In dual stack clusters this list
+ contains two IPs otherwise only one.
format: ip
items:
type: string
@@ -2187,18 +2289,16 @@ spec:
properties:
type:
default: OpenShiftManagedDefault
- description: type defines the type of load balancer used
- by the cluster on VSphere platform which can be a user-managed
- or openshift-managed load balancer that is to be used
- for the OpenShift API and Ingress endpoints. When set
- to OpenShiftManagedDefault the static pods in charge
- of API and Ingress traffic load-balancing defined in
- the machine config operator will be deployed. When set
- to UserManaged these static pods will not be deployed
- and it is expected that the load balancer is configured
- out of band by the deployer. When omitted, this means
- no opinion and the platform is left to choose a reasonable
- default. The default value is OpenShiftManagedDefault.
+ description: |-
+ type defines the type of load balancer used by the cluster on VSphere platform
+ which can be a user-managed or openshift-managed load balancer
+ that is to be used for the OpenShift API and Ingress endpoints.
+ When set to OpenShiftManagedDefault the static pods in charge of API and Ingress traffic load-balancing
+ defined in the machine config operator will be deployed.
+ When set to UserManaged these static pods will not be deployed and it is expected that
+ the load balancer is configured out of band by the deployer.
+ When omitted, this means no opinion and the platform is left to choose a reasonable default.
+ The default value is OpenShiftManagedDefault.
enum:
- OpenShiftManagedDefault
- UserManaged
@@ -2225,13 +2325,13 @@ spec:
x-kubernetes-validations:
- rule: self.all(x, self.exists_one(y, x == y))
nodeDNSIP:
- description: nodeDNSIP is the IP address for the internal
- DNS used by the nodes. Unlike the one managed by the DNS
- operator, `NodeDNSIP` provides name resolution for the nodes
- themselves. There is no DNS-as-a-service for vSphere deployments.
- In order to minimize necessary changes to the datacenter
- DNS, a DNS service is hosted as a static pod to serve those
- hostnames to the nodes in the cluster.
+ description: |-
+ nodeDNSIP is the IP address for the internal DNS used by the
+ nodes. Unlike the one managed by the DNS operator, `NodeDNSIP`
+ provides name resolution for the nodes themselves. There is no DNS-as-a-service for
+ vSphere deployments. In order to minimize necessary changes to the
+ datacenter DNS, a DNS service is hosted as a static pod to serve those hostnames
+ to the nodes in the cluster.
type: string
type: object
type: object
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_ingresses.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_ingresses.crd.yaml
index b102ecad7391c77f957397de97e53676be11b591..34f2c0a823342f0b607ed09a361d14e38b207841 100644
--- a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_ingresses.crd.yaml
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_ingresses.crd.yaml
@@ -20,20 +20,26 @@ spec:
- name: v1
schema:
openAPIV3Schema:
- description: "Ingress holds cluster-wide information about ingress, including
- the default ingress domain used for routes. The canonical name is `cluster`.
- \n Compatibility level 1: Stable within a major release for a minimum of
- 12 months or 3 minor releases (whichever is longer)."
+ description: |-
+ Ingress holds cluster-wide information about ingress, including the default ingress domain
+ used for routes. The canonical name is `cluster`.
+
+ Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -41,22 +47,25 @@ spec:
description: spec holds user settable values for configuration
properties:
appsDomain:
- description: appsDomain is an optional domain to use instead of the
- one specified in the domain field when a Route is created without
- specifying an explicit host. If appsDomain is nonempty, this value
- is used to generate default host values for Route. Unlike domain,
- appsDomain may be modified after installation. This assumes a new
- ingresscontroller has been setup with a wildcard certificate.
+ description: |-
+ appsDomain is an optional domain to use instead of the one specified
+ in the domain field when a Route is created without specifying an explicit
+ host. If appsDomain is nonempty, this value is used to generate default
+ host values for Route. Unlike domain, appsDomain may be modified after
+ installation.
+ This assumes a new ingresscontroller has been setup with a wildcard
+ certificate.
type: string
componentRoutes:
- description: "componentRoutes is an optional list of routes that are
- managed by OpenShift components that a cluster-admin is able to
- configure the hostname and serving certificate for. The namespace
- and name of each route in this list should match an existing entry
- in the status.componentRoutes list. \n To determine the set of configurable
- Routes, look at namespace and name of entries in the .status.componentRoutes
- list, where participating operators write the status of configurable
- routes."
+ description: |-
+ componentRoutes is an optional list of routes that are managed by OpenShift components
+ that a cluster-admin is able to configure the hostname and serving certificate for.
+ The namespace and name of each route in this list should match an existing entry in the
+ status.componentRoutes list.
+
+ To determine the set of configurable Routes, look at namespace and name of entries in the
+ .status.componentRoutes list, where participating operators write the status of
+ configurable routes.
items:
description: ComponentRouteSpec allows for configuration of a route's
hostname and serving certificate.
@@ -67,30 +76,30 @@ spec:
pattern: ^([a-zA-Z0-9\p{S}\p{L}]((-?[a-zA-Z0-9\p{S}\p{L}]{0,62})?)|([a-zA-Z0-9\p{S}\p{L}](([a-zA-Z0-9-\p{S}\p{L}]{0,61}[a-zA-Z0-9\p{S}\p{L}])?)(\.)){1,}([a-zA-Z\p{L}]){2,63})$|^(([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})[\.]){0,}([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})$
type: string
name:
- description: "name is the logical name of the route to customize.
- \n The namespace and name of this componentRoute must match
- a corresponding entry in the list of status.componentRoutes
- if the route is to be customized."
+ description: |-
+ name is the logical name of the route to customize.
+
+ The namespace and name of this componentRoute must match a corresponding
+ entry in the list of status.componentRoutes if the route is to be customized.
maxLength: 256
minLength: 1
type: string
namespace:
- description: "namespace is the namespace of the route to customize.
- \n The namespace and name of this componentRoute must match
- a corresponding entry in the list of status.componentRoutes
- if the route is to be customized."
+ description: |-
+ namespace is the namespace of the route to customize.
+
+ The namespace and name of this componentRoute must match a corresponding
+ entry in the list of status.componentRoutes if the route is to be customized.
maxLength: 63
minLength: 1
pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
type: string
servingCertKeyPairSecret:
- description: servingCertKeyPairSecret is a reference to a secret
- of type `kubernetes.io/tls` in the openshift-config namespace.
- The serving cert/key pair must match and will be used by the
- operator to fulfill the intent of serving with this name.
- If the custom hostname uses the default routing suffix of
- the cluster, the Secret specification for a serving certificate
- will not be needed.
+ description: |-
+ servingCertKeyPairSecret is a reference to a secret of type `kubernetes.io/tls` in the openshift-config namespace.
+ The serving cert/key pair must match and will be used by the operator to fulfill the intent of serving with this name.
+ If the custom hostname uses the default routing suffix of the cluster,
+ the Secret specification for a serving certificate will not be needed.
properties:
name:
description: name is the metadata.name of the referenced
@@ -110,43 +119,49 @@ spec:
- name
x-kubernetes-list-type: map
domain:
- description: "domain is used to generate a default host name for a
- route when the route's host name is empty. The generated host name
- will follow this pattern: \"<route-name>.<route-namespace>.<domain>\".
- \n It is also used as the default wildcard domain suffix for ingress.
- The default ingresscontroller domain will follow this pattern: \"*.<domain>\".
- \n Once set, changing domain is not currently supported."
+ description: |-
+ domain is used to generate a default host name for a route when the
+ route's host name is empty. The generated host name will follow this
+ pattern: "<route-name>.<route-namespace>.<domain>".
+
+ It is also used as the default wildcard domain suffix for ingress. The
+ default ingresscontroller domain will follow this pattern: "*.<domain>".
+
+ Once set, changing domain is not currently supported.
type: string
loadBalancer:
- description: loadBalancer contains the load balancer details in general
- which are not only specific to the underlying infrastructure provider
- of the current cluster and are required for Ingress Controller to
- work on OpenShift.
+ description: |-
+ loadBalancer contains the load balancer details in general which are not only specific to the underlying infrastructure
+ provider of the current cluster and are required for Ingress Controller to work on OpenShift.
properties:
platform:
- description: platform holds configuration specific to the underlying
- infrastructure provider for the ingress load balancers. When
- omitted, this means the user has no opinion and the platform
- is left to choose reasonable defaults. These defaults are subject
- to change over time.
+ description: |-
+ platform holds configuration specific to the underlying
+ infrastructure provider for the ingress load balancers.
+ When omitted, this means the user has no opinion and the platform is left
+ to choose reasonable defaults. These defaults are subject to change over time.
properties:
aws:
description: aws contains settings specific to the Amazon
Web Services infrastructure provider.
properties:
type:
- description: "type allows user to set a load balancer
- type. When this field is set the default ingresscontroller
- will get created using the specified LBType. If this
- field is not set then the default ingress controller
- of LBType Classic will be created. Valid values are:
- \n * \"Classic\": A Classic Load Balancer that makes
- routing decisions at either the transport layer (TCP/SSL)
- or the application layer (HTTP/HTTPS). See the following
- for additional details: \n https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#clb
- \n * \"NLB\": A Network Load Balancer that makes routing
- decisions at the transport layer (TCP/SSL). See the
- following for additional details: \n https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#nlb"
+ description: |-
+ type allows user to set a load balancer type.
+ When this field is set the default ingresscontroller will get created using the specified LBType.
+ If this field is not set then the default ingress controller of LBType Classic will be created.
+ Valid values are:
+
+ * "Classic": A Classic Load Balancer that makes routing decisions at either
+ the transport layer (TCP/SSL) or the application layer (HTTP/HTTPS). See
+ the following for additional details:
+
+ https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#clb
+
+ * "NLB": A Network Load Balancer that makes routing decisions at the
+ transport layer (TCP/SSL). See the following for additional details:
+
+ https://docs.aws.amazon.com/AmazonECS/latest/developerguide/load-balancer-types.html#nlb
enum:
- NLB
- Classic
@@ -155,13 +170,12 @@ spec:
- type
type: object
type:
- description: type is the underlying infrastructure provider
- for the cluster. Allowed values are "AWS", "Azure", "BareMetal",
- "GCP", "Libvirt", "OpenStack", "VSphere", "oVirt", "KubeVirt",
- "EquinixMetal", "PowerVS", "AlibabaCloud", "Nutanix" and
- "None". Individual components may not support all platforms,
- and must handle unrecognized platforms as None if they do
- not support that platform.
+ description: |-
+ type is the underlying infrastructure provider for the cluster.
+ Allowed values are "AWS", "Azure", "BareMetal", "GCP", "Libvirt",
+ "OpenStack", "VSphere", "oVirt", "KubeVirt", "EquinixMetal", "PowerVS",
+ "AlibabaCloud", "Nutanix" and "None". Individual components may not support all platforms,
+ and must handle unrecognized platforms as None if they do not support that platform.
enum:
- ""
- AWS
@@ -184,118 +198,112 @@ spec:
type: object
type: object
requiredHSTSPolicies:
- description: "requiredHSTSPolicies specifies HSTS policies that are
- required to be set on newly created or updated routes matching
- the domainPattern/s and namespaceSelector/s that are specified in
- the policy. Each requiredHSTSPolicy must have at least a domainPattern
- and a maxAge to validate a route HSTS Policy route annotation, and
- affect route admission. \n A candidate route is checked for HSTS
- Policies if it has the HSTS Policy route annotation: \"haproxy.router.openshift.io/hsts_header\"
+ description: |-
+ requiredHSTSPolicies specifies HSTS policies that are required to be set on newly created or updated routes
+ matching the domainPattern/s and namespaceSelector/s that are specified in the policy.
+ Each requiredHSTSPolicy must have at least a domainPattern and a maxAge to validate a route HSTS Policy route
+ annotation, and affect route admission.
+
+ A candidate route is checked for HSTS Policies if it has the HSTS Policy route annotation:
+ "haproxy.router.openshift.io/hsts_header"
E.g. haproxy.router.openshift.io/hsts_header: max-age=31536000;preload;includeSubDomains
- \n - For each candidate route, if it matches a requiredHSTSPolicy
- domainPattern and optional namespaceSelector, then the maxAge, preloadPolicy,
- and includeSubdomainsPolicy must be valid to be admitted. Otherwise,
- the route is rejected. - The first match, by domainPattern and optional
- namespaceSelector, in the ordering of the RequiredHSTSPolicies determines
- the route's admission status. - If the candidate route doesn't match
- any requiredHSTSPolicy domainPattern and optional namespaceSelector,
- then it may use any HSTS Policy annotation. \n The HSTS policy configuration
- may be changed after routes have already been created. An update
- to a previously admitted route may then fail if the updated route
- does not conform to the updated HSTS policy configuration. However,
- changing the HSTS policy configuration will not cause a route that
- is already admitted to stop working. \n Note that if there are no
- RequiredHSTSPolicies, any HSTS Policy annotation on the route is
- valid."
+
+ - For each candidate route, if it matches a requiredHSTSPolicy domainPattern and optional namespaceSelector,
+ then the maxAge, preloadPolicy, and includeSubdomainsPolicy must be valid to be admitted. Otherwise, the route
+ is rejected.
+ - The first match, by domainPattern and optional namespaceSelector, in the ordering of the RequiredHSTSPolicies
+ determines the route's admission status.
+ - If the candidate route doesn't match any requiredHSTSPolicy domainPattern and optional namespaceSelector,
+ then it may use any HSTS Policy annotation.
+
+ The HSTS policy configuration may be changed after routes have already been created. An update to a previously
+ admitted route may then fail if the updated route does not conform to the updated HSTS policy configuration.
+ However, changing the HSTS policy configuration will not cause a route that is already admitted to stop working.
+
+ Note that if there are no RequiredHSTSPolicies, any HSTS Policy annotation on the route is valid.
items:
properties:
domainPatterns:
- description: "domainPatterns is a list of domains for which
- the desired HSTS annotations are required. If domainPatterns
- is specified and a route is created with a spec.host matching
- one of the domains, the route must specify the HSTS Policy
- components described in the matching RequiredHSTSPolicy. \n
- The use of wildcards is allowed like this: *.foo.com matches
- everything under foo.com. foo.com only matches foo.com, so
- to cover foo.com and everything under it, you must specify
- *both*."
+ description: |-
+ domainPatterns is a list of domains for which the desired HSTS annotations are required.
+ If domainPatterns is specified and a route is created with a spec.host matching one of the domains,
+ the route must specify the HSTS Policy components described in the matching RequiredHSTSPolicy.
+
+ The use of wildcards is allowed like this: *.foo.com matches everything under foo.com.
+ foo.com only matches foo.com, so to cover foo.com and everything under it, you must specify *both*.
items:
type: string
minItems: 1
type: array
includeSubDomainsPolicy:
- description: 'includeSubDomainsPolicy means the HSTS Policy
- should apply to any subdomains of the host''s domain name. Thus,
- for the host bar.foo.com, if includeSubDomainsPolicy was set
- to RequireIncludeSubDomains: - the host app.bar.foo.com would
- inherit the HSTS Policy of bar.foo.com - the host bar.foo.com
- would inherit the HSTS Policy of bar.foo.com - the host foo.com
- would NOT inherit the HSTS Policy of bar.foo.com - the host
- def.foo.com would NOT inherit the HSTS Policy of bar.foo.com'
+ description: |-
+ includeSubDomainsPolicy means the HSTS Policy should apply to any subdomains of the host's
+ domain name. Thus, for the host bar.foo.com, if includeSubDomainsPolicy was set to RequireIncludeSubDomains:
+ - the host app.bar.foo.com would inherit the HSTS Policy of bar.foo.com
+ - the host bar.foo.com would inherit the HSTS Policy of bar.foo.com
+ - the host foo.com would NOT inherit the HSTS Policy of bar.foo.com
+ - the host def.foo.com would NOT inherit the HSTS Policy of bar.foo.com
enum:
- RequireIncludeSubDomains
- RequireNoIncludeSubDomains
- NoOpinion
type: string
maxAge:
- description: maxAge is the delta time range in seconds during
- which hosts are regarded as HSTS hosts. If set to 0, it negates
- the effect, and hosts are removed as HSTS hosts. If set to
- 0 and includeSubdomains is specified, all subdomains of the
- host are also removed as HSTS hosts. maxAge is a time-to-live
- value, and if this policy is not refreshed on a client, the
- HSTS policy will eventually expire on that client.
+ description: |-
+ maxAge is the delta time range in seconds during which hosts are regarded as HSTS hosts.
+ If set to 0, it negates the effect, and hosts are removed as HSTS hosts.
+ If set to 0 and includeSubdomains is specified, all subdomains of the host are also removed as HSTS hosts.
+ maxAge is a time-to-live value, and if this policy is not refreshed on a client, the HSTS
+ policy will eventually expire on that client.
properties:
largestMaxAge:
- description: The largest allowed value (in seconds) of the
- RequiredHSTSPolicy max-age This value can be left unspecified,
- in which case no upper limit is enforced.
+ description: |-
+ The largest allowed value (in seconds) of the RequiredHSTSPolicy max-age
+ This value can be left unspecified, in which case no upper limit is enforced.
format: int32
maximum: 2147483647
minimum: 0
type: integer
smallestMaxAge:
- description: The smallest allowed value (in seconds) of
- the RequiredHSTSPolicy max-age Setting max-age=0 allows
- the deletion of an existing HSTS header from a host. This
- is a necessary tool for administrators to quickly correct
- mistakes. This value can be left unspecified, in which
- case no lower limit is enforced.
+ description: |-
+ The smallest allowed value (in seconds) of the RequiredHSTSPolicy max-age
+ Setting max-age=0 allows the deletion of an existing HSTS header from a host. This is a necessary
+ tool for administrators to quickly correct mistakes.
+ This value can be left unspecified, in which case no lower limit is enforced.
format: int32
maximum: 2147483647
minimum: 0
type: integer
type: object
namespaceSelector:
- description: namespaceSelector specifies a label selector such
- that the policy applies only to those routes that are in namespaces
- with labels that match the selector, and are in one of the
- DomainPatterns. Defaults to the empty LabelSelector, which
- matches everything.
+ description: |-
+ namespaceSelector specifies a label selector such that the policy applies only to those routes that
+ are in namespaces with labels that match the selector, and are in one of the DomainPatterns.
+ Defaults to the empty LabelSelector, which matches everything.
properties:
matchExpressions:
description: matchExpressions is a list of label selector
requirements. The requirements are ANDed.
items:
- description: A label selector requirement is a selector
- that contains values, a key, and an operator that relates
- the key and values.
+ description: |-
+ A label selector requirement is a selector that contains values, a key, and an operator that
+ relates the key and values.
properties:
key:
description: key is the label key that the selector
applies to.
type: string
operator:
- description: operator represents a key's relationship
- to a set of values. Valid operators are In, NotIn,
- Exists and DoesNotExist.
+ description: |-
+ operator represents a key's relationship to a set of values.
+ Valid operators are In, NotIn, Exists and DoesNotExist.
type: string
values:
- description: values is an array of string values.
- If the operator is In or NotIn, the values array
- must be non-empty. If the operator is Exists or
- DoesNotExist, the values array must be empty. This
- array is replaced during a strategic merge patch.
+ description: |-
+ values is an array of string values. If the operator is In or NotIn,
+ the values array must be non-empty. If the operator is Exists or DoesNotExist,
+ the values array must be empty. This array is replaced during a strategic
+ merge patch.
items:
type: string
type: array
@@ -309,18 +317,17 @@ spec:
matchLabels:
additionalProperties:
type: string
- description: matchLabels is a map of {key,value} pairs.
- A single {key,value} in the matchLabels map is equivalent
- to an element of matchExpressions, whose key field is
- "key", the operator is "In", and the values array contains
- only "value". The requirements are ANDed.
+ description: |-
+ matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
+ map is equivalent to an element of matchExpressions, whose key field is "key", the
+ operator is "In", and the values array contains only "value". The requirements are ANDed.
type: object
type: object
x-kubernetes-map-type: atomic
preloadPolicy:
- description: preloadPolicy directs the client to include hosts
- in its host preload list so that it never needs to do an initial
- load to get the HSTS header (note that this is not defined
+ description: |-
+ preloadPolicy directs the client to include hosts in its host preload list so that
+ it never needs to do an initial load to get the HSTS header (note that this is not defined
in RFC 6797 and is therefore client implementation-dependent).
enum:
- RequirePreload
@@ -337,67 +344,58 @@ spec:
be overridden.
properties:
componentRoutes:
- description: componentRoutes is where participating operators place
- the current route status for routes whose hostnames and serving
- certificates can be customized by the cluster-admin.
+ description: |-
+ componentRoutes is where participating operators place the current route status for routes whose
+ hostnames and serving certificates can be customized by the cluster-admin.
items:
description: ComponentRouteStatus contains information allowing
configuration of a route's hostname and serving certificate.
properties:
conditions:
- description: "conditions are used to communicate the state of
- the componentRoutes entry. \n Supported conditions include
- Available, Degraded and Progressing. \n If available is true,
- the content served by the route can be accessed by users.
- This includes cases where a default may continue to serve
- content while the customized route specified by the cluster-admin
- is being configured. \n If Degraded is true, that means something
- has gone wrong trying to handle the componentRoutes entry.
- The currentHostnames field may or may not be in effect. \n
- If Progressing is true, that means the component is taking
- some action related to the componentRoutes entry."
+ description: |-
+ conditions are used to communicate the state of the componentRoutes entry.
+
+ Supported conditions include Available, Degraded and Progressing.
+
+ If available is true, the content served by the route can be accessed by users. This includes cases
+ where a default may continue to serve content while the customized route specified by the cluster-admin
+ is being configured.
+
+ If Degraded is true, that means something has gone wrong trying to handle the componentRoutes entry.
+ The currentHostnames field may or may not be in effect.
+
+ If Progressing is true, that means the component is taking some action related to the componentRoutes entry.
items:
- description: "Condition contains details for one aspect of
- the current state of this API Resource. --- This struct
- is intended for direct use as an array at the field path
- .status.conditions. For example, \n type FooStatus struct{
- // Represents the observations of a foo's current state.
- // Known .status.conditions.type are: \"Available\", \"Progressing\",
- and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge
- // +listType=map // +listMapKey=type Conditions []metav1.Condition
- `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\"
- protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields
- }"
+ description: Condition contains details for one aspect of
+ the current state of this API Resource.
properties:
lastTransitionTime:
- description: lastTransitionTime is the last time the condition
- transitioned from one status to another. This should
- be when the underlying condition changed. If that is
- not known, then using the time when the API field changed
- is acceptable.
+ description: |-
+ lastTransitionTime is the last time the condition transitioned from one status to another.
+ This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.
format: date-time
type: string
message:
- description: message is a human readable message indicating
- details about the transition. This may be an empty string.
+ description: |-
+ message is a human readable message indicating details about the transition.
+ This may be an empty string.
maxLength: 32768
type: string
observedGeneration:
- description: observedGeneration represents the .metadata.generation
- that the condition was set based upon. For instance,
- if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration
- is 9, the condition is out of date with respect to the
- current state of the instance.
+ description: |-
+ observedGeneration represents the .metadata.generation that the condition was set based upon.
+ For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
+ with respect to the current state of the instance.
format: int64
minimum: 0
type: integer
reason:
- description: reason contains a programmatic identifier
- indicating the reason for the condition's last transition.
- Producers of specific condition types may define expected
- values and meanings for this field, and whether the
- values are considered a guaranteed API. The value should
- be a CamelCase string. This field may not be empty.
+ description: |-
+ reason contains a programmatic identifier indicating the reason for the condition's last transition.
+ Producers of specific condition types may define expected values and meanings for this field,
+ and whether the values are considered a guaranteed API.
+ The value should be a CamelCase string.
+ This field may not be empty.
maxLength: 1024
minLength: 1
pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
@@ -412,11 +410,6 @@ spec:
type: string
type:
description: type of condition in CamelCase or in foo.example.com/CamelCase.
- --- Many .condition.type values are consistent across
- resources like Available, but because arbitrary conditions
- can be useful (see .node.status.conditions), the ability
- to deconflict is important. The regex it matches is
- (dns1123SubdomainFmt/)?(qualifiedNameFmt)
maxLength: 316
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
@@ -445,10 +438,9 @@ spec:
maxItems: 5
type: array
currentHostnames:
- description: currentHostnames is the list of current names used
- by the route. Typically, this list should consist of a single
- hostname, but if multiple hostnames are supported by the route
- the operator may write multiple entries to this list.
+ description: |-
+ currentHostnames is the list of current names used by the route. Typically, this list should consist of a single
+ hostname, but if multiple hostnames are supported by the route the operator may write multiple entries to this list.
items:
description: Hostname is a host name as defined by RFC-1123.
pattern: ^([a-zA-Z0-9\p{S}\p{L}]((-?[a-zA-Z0-9\p{S}\p{L}]{0,62})?)|([a-zA-Z0-9\p{S}\p{L}](([a-zA-Z0-9-\p{S}\p{L}]{0,61}[a-zA-Z0-9\p{S}\p{L}])?)(\.)){1,}([a-zA-Z\p{L}]){2,63})$|^(([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})[\.]){0,}([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})$
@@ -461,21 +453,22 @@ spec:
pattern: ^([a-zA-Z0-9\p{S}\p{L}]((-?[a-zA-Z0-9\p{S}\p{L}]{0,62})?)|([a-zA-Z0-9\p{S}\p{L}](([a-zA-Z0-9-\p{S}\p{L}]{0,61}[a-zA-Z0-9\p{S}\p{L}])?)(\.)){1,}([a-zA-Z\p{L}]){2,63})$|^(([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})[\.]){0,}([a-z0-9][-a-z0-9]{0,61}[a-z0-9]|[a-z0-9]{1,63})$
type: string
name:
- description: "name is the logical name of the route to customize.
- It does not have to be the actual name of a route resource
- but it cannot be renamed. \n The namespace and name of this
- componentRoute must match a corresponding entry in the list
- of spec.componentRoutes if the route is to be customized."
+ description: |-
+ name is the logical name of the route to customize. It does not have to be the actual name of a route resource
+ but it cannot be renamed.
+
+ The namespace and name of this componentRoute must match a corresponding
+ entry in the list of spec.componentRoutes if the route is to be customized.
maxLength: 256
minLength: 1
type: string
namespace:
- description: "namespace is the namespace of the route to customize.
- It must be a real namespace. Using an actual namespace ensures
- that no two components will conflict and the same component
- can be installed multiple times. \n The namespace and name
- of this componentRoute must match a corresponding entry in
- the list of spec.componentRoutes if the route is to be customized."
+ description: |-
+ namespace is the namespace of the route to customize. It must be a real namespace. Using an actual namespace
+ ensures that no two components will conflict and the same component can be installed multiple times.
+
+ The namespace and name of this componentRoute must match a corresponding
+ entry in the list of spec.componentRoutes if the route is to be customized.
maxLength: 63
minLength: 1
pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
@@ -519,14 +512,19 @@ spec:
- name
x-kubernetes-list-type: map
defaultPlacement:
- description: "defaultPlacement is set at installation time to control
- which nodes will host the ingress router pods by default. The options
- are control-plane nodes or worker nodes. \n This field works by
- dictating how the Cluster Ingress Operator will consider unset replicas
- and nodePlacement fields in IngressController resources when creating
- the corresponding Deployments. \n See the documentation for the
- IngressController replicas and nodePlacement fields for more information.
- \n When omitted, the default value is Workers"
+ description: |-
+ defaultPlacement is set at installation time to control which
+ nodes will host the ingress router pods by default. The options are
+ control-plane nodes or worker nodes.
+
+ This field works by dictating how the Cluster Ingress Operator will
+ consider unset replicas and nodePlacement fields in IngressController
+ resources when creating the corresponding Deployments.
+
+ See the documentation for the IngressController replicas and nodePlacement
+ fields for more information.
+
+ When omitted, the default value is Workers
enum:
- ControlPlane
- Workers
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_networks.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_networks.crd.yaml
index 04e14d9f22f2886504ea035cff641d4465da4fd3..49db650d7aae85894bbcf9b3fafee7e5f91c37a7 100644
--- a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_networks.crd.yaml
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_networks.crd.yaml
@@ -20,46 +20,52 @@ spec:
- name: v1
schema:
openAPIV3Schema:
- description: "Network holds cluster-wide information about Network. The canonical
- name is `cluster`. It is used to configure the desired network configuration,
- such as: IP address pools for services/pod IPs, network plugin, etc. Please
- view network.spec for an explanation on what applies when configuring this
- resource. \n Compatibility level 1: Stable within a major release for a
- minimum of 12 months or 3 minor releases (whichever is longer)."
+ description: |-
+ Network holds cluster-wide information about Network. The canonical name is `cluster`. It is used to configure the desired network configuration, such as: IP address pools for services/pod IPs, network plugin, etc.
+ Please view network.spec for an explanation on what applies when configuring this resource.
+
+ Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
spec:
- description: spec holds user settable values for configuration. As a general
- rule, this SHOULD NOT be read directly. Instead, you should consume
- the NetworkStatus, as it indicates the currently deployed configuration.
- Currently, most spec fields are immutable after installation. Please
- view the individual ones for further details on each.
+ description: |-
+ spec holds user settable values for configuration.
+ As a general rule, this SHOULD NOT be read directly. Instead, you should
+ consume the NetworkStatus, as it indicates the currently deployed configuration.
+ Currently, most spec fields are immutable after installation. Please view the individual ones for further details on each.
properties:
clusterNetwork:
- description: IP address pool to use for pod IPs. This field is immutable
- after installation.
+ description: |-
+ IP address pool to use for pod IPs.
+ This field is immutable after installation.
items:
- description: ClusterNetworkEntry is a contiguous block of IP addresses
- from which pod IPs are allocated.
+ description: |-
+ ClusterNetworkEntry is a contiguous block of IP addresses from which pod IPs
+ are allocated.
properties:
cidr:
description: The complete block for pod IPs.
type: string
hostPrefix:
- description: The size (prefix) of block to allocate to each
- node. If this field is not used by the plugin, it can be left
- unset.
+ description: |-
+ The size (prefix) of block to allocate to each node. If this
+ field is not used by the plugin, it can be left unset.
format: int32
minimum: 0
type: integer
@@ -67,26 +73,28 @@ spec:
type: array
x-kubernetes-list-type: atomic
externalIP:
- description: externalIP defines configuration for controllers that
- affect Service.ExternalIP. If nil, then ExternalIP is not allowed
- to be set.
+ description: |-
+ externalIP defines configuration for controllers that
+ affect Service.ExternalIP. If nil, then ExternalIP is
+ not allowed to be set.
properties:
autoAssignCIDRs:
- description: autoAssignCIDRs is a list of CIDRs from which to
- automatically assign Service.ExternalIP. These are assigned
- when the service is of type LoadBalancer. In general, this is
- only useful for bare-metal clusters. In Openshift 3.x, this
- was misleadingly called "IngressIPs". Automatically assigned
- External IPs are not affected by any ExternalIPPolicy rules.
+ description: |-
+ autoAssignCIDRs is a list of CIDRs from which to automatically assign
+ Service.ExternalIP. These are assigned when the service is of type
+ LoadBalancer. In general, this is only useful for bare-metal clusters.
+ In Openshift 3.x, this was misleadingly called "IngressIPs".
+ Automatically assigned External IPs are not affected by any
+ ExternalIPPolicy rules.
Currently, only one entry may be provided.
items:
type: string
type: array
x-kubernetes-list-type: atomic
policy:
- description: policy is a set of restrictions applied to the ExternalIP
- field. If nil or empty, then ExternalIP is not allowed to be
- set.
+ description: |-
+ policy is a set of restrictions applied to the ExternalIP field.
+ If nil or empty, then ExternalIP is not allowed to be set.
properties:
allowedCIDRs:
description: allowedCIDRs is the list of allowed CIDRs.
@@ -95,8 +103,9 @@ spec:
type: array
x-kubernetes-list-type: atomic
rejectedCIDRs:
- description: rejectedCIDRs is the list of disallowed CIDRs.
- These take precedence over allowedCIDRs.
+ description: |-
+ rejectedCIDRs is the list of disallowed CIDRs. These take precedence
+ over allowedCIDRs.
items:
type: string
type: array
@@ -104,142 +113,145 @@ spec:
type: object
type: object
networkDiagnostics:
- description: "networkDiagnostics defines network diagnostics configuration.
- \n Takes precedence over spec.disableNetworkDiagnostics in network.operator.openshift.io.
- If networkDiagnostics is not specified or is empty, and the spec.disableNetworkDiagnostics
- flag in network.operator.openshift.io is set to true, the network
- diagnostics feature will be disabled."
+ description: |-
+ networkDiagnostics defines network diagnostics configuration.
+
+ Takes precedence over spec.disableNetworkDiagnostics in network.operator.openshift.io.
+ If networkDiagnostics is not specified or is empty,
+ and the spec.disableNetworkDiagnostics flag in network.operator.openshift.io is set to true,
+ the network diagnostics feature will be disabled.
properties:
mode:
- description: "mode controls the network diagnostics mode \n When
- omitted, this means the user has no opinion and the platform
- is left to choose reasonable defaults. These defaults are subject
- to change over time. The current default is All."
+ description: |-
+ mode controls the network diagnostics mode
+
+ When omitted, this means the user has no opinion and the platform is left
+ to choose reasonable defaults. These defaults are subject to change over time.
+ The current default is All.
enum:
- ""
- All
- Disabled
type: string
sourcePlacement:
- description: "sourcePlacement controls the scheduling of network
- diagnostics source deployment \n See NetworkDiagnosticsSourcePlacement
- for more details about default values."
+ description: |-
+ sourcePlacement controls the scheduling of network diagnostics source deployment
+
+ See NetworkDiagnosticsSourcePlacement for more details about default values.
properties:
nodeSelector:
additionalProperties:
type: string
- description: "nodeSelector is the node selector applied to
- network diagnostics components \n When omitted, this means
- the user has no opinion and the platform is left to choose
- reasonable defaults. These defaults are subject to change
- over time. The current default is `kubernetes.io/os: linux`."
+ description: |-
+ nodeSelector is the node selector applied to network diagnostics components
+
+ When omitted, this means the user has no opinion and the platform is left
+ to choose reasonable defaults. These defaults are subject to change over time.
+ The current default is `kubernetes.io/os: linux`.
type: object
tolerations:
- description: "tolerations is a list of tolerations applied
- to network diagnostics components \n When omitted, this
- means the user has no opinion and the platform is left to
- choose reasonable defaults. These defaults are subject to
- change over time. The current default is an empty list."
+ description: |-
+ tolerations is a list of tolerations applied to network diagnostics components
+
+ When omitted, this means the user has no opinion and the platform is left
+ to choose reasonable defaults. These defaults are subject to change over time.
+ The current default is an empty list.
items:
- description: The pod this Toleration is attached to tolerates
- any taint that matches the triple <key,value,effect> using
- the matching operator <operator>.
+ description: |-
+ The pod this Toleration is attached to tolerates any taint that matches
+ the triple <key,value,effect> using the matching operator <operator>.
properties:
effect:
- description: Effect indicates the taint effect to match.
- Empty means match all taint effects. When specified,
- allowed values are NoSchedule, PreferNoSchedule and
- NoExecute.
+ description: |-
+ Effect indicates the taint effect to match. Empty means match all taint effects.
+ When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute.
type: string
key:
- description: Key is the taint key that the toleration
- applies to. Empty means match all taint keys. If the
- key is empty, operator must be Exists; this combination
- means to match all values and all keys.
+ description: |-
+ Key is the taint key that the toleration applies to. Empty means match all taint keys.
+ If the key is empty, operator must be Exists; this combination means to match all values and all keys.
type: string
operator:
- description: Operator represents a key's relationship
- to the value. Valid operators are Exists and Equal.
- Defaults to Equal. Exists is equivalent to wildcard
- for value, so that a pod can tolerate all taints of
- a particular category.
+ description: |-
+ Operator represents a key's relationship to the value.
+ Valid operators are Exists and Equal. Defaults to Equal.
+ Exists is equivalent to wildcard for value, so that a pod can
+ tolerate all taints of a particular category.
type: string
tolerationSeconds:
- description: TolerationSeconds represents the period
- of time the toleration (which must be of effect NoExecute,
- otherwise this field is ignored) tolerates the taint.
- By default, it is not set, which means tolerate the
- taint forever (do not evict). Zero and negative values
- will be treated as 0 (evict immediately) by the system.
+ description: |-
+ TolerationSeconds represents the period of time the toleration (which must be
+ of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default,
+ it is not set, which means tolerate the taint forever (do not evict). Zero and
+ negative values will be treated as 0 (evict immediately) by the system.
format: int64
type: integer
value:
- description: Value is the taint value the toleration
- matches to. If the operator is Exists, the value should
- be empty, otherwise just a regular string.
+ description: |-
+ Value is the taint value the toleration matches to.
+ If the operator is Exists, the value should be empty, otherwise just a regular string.
type: string
type: object
type: array
x-kubernetes-list-type: atomic
type: object
targetPlacement:
- description: "targetPlacement controls the scheduling of network
- diagnostics target daemonset \n See NetworkDiagnosticsTargetPlacement
- for more details about default values."
+ description: |-
+ targetPlacement controls the scheduling of network diagnostics target daemonset
+
+ See NetworkDiagnosticsTargetPlacement for more details about default values.
properties:
nodeSelector:
additionalProperties:
type: string
- description: "nodeSelector is the node selector applied to
- network diagnostics components \n When omitted, this means
- the user has no opinion and the platform is left to choose
- reasonable defaults. These defaults are subject to change
- over time. The current default is `kubernetes.io/os: linux`."
+ description: |-
+ nodeSelector is the node selector applied to network diagnostics components
+
+ When omitted, this means the user has no opinion and the platform is left
+ to choose reasonable defaults. These defaults are subject to change over time.
+ The current default is `kubernetes.io/os: linux`.
type: object
tolerations:
- description: "tolerations is a list of tolerations applied
- to network diagnostics components \n When omitted, this
- means the user has no opinion and the platform is left to
- choose reasonable defaults. These defaults are subject to
- change over time. The current default is `- operator: \"Exists\"`
- which means that all taints are tolerated."
+ description: |-
+ tolerations is a list of tolerations applied to network diagnostics components
+
+ When omitted, this means the user has no opinion and the platform is left
+ to choose reasonable defaults. These defaults are subject to change over time.
+ The current default is `- operator: "Exists"` which means that all taints are tolerated.
items:
- description: The pod this Toleration is attached to tolerates
- any taint that matches the triple <key,value,effect> using
- the matching operator <operator>.
+ description: |-
+ The pod this Toleration is attached to tolerates any taint that matches
+ the triple <key,value,effect> using the matching operator <operator>.
properties:
effect:
- description: Effect indicates the taint effect to match.
- Empty means match all taint effects. When specified,
- allowed values are NoSchedule, PreferNoSchedule and
- NoExecute.
+ description: |-
+ Effect indicates the taint effect to match. Empty means match all taint effects.
+ When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute.
type: string
key:
- description: Key is the taint key that the toleration
- applies to. Empty means match all taint keys. If the
- key is empty, operator must be Exists; this combination
- means to match all values and all keys.
+ description: |-
+ Key is the taint key that the toleration applies to. Empty means match all taint keys.
+ If the key is empty, operator must be Exists; this combination means to match all values and all keys.
type: string
operator:
- description: Operator represents a key's relationship
- to the value. Valid operators are Exists and Equal.
- Defaults to Equal. Exists is equivalent to wildcard
- for value, so that a pod can tolerate all taints of
- a particular category.
+ description: |-
+ Operator represents a key's relationship to the value.
+ Valid operators are Exists and Equal. Defaults to Equal.
+ Exists is equivalent to wildcard for value, so that a pod can
+ tolerate all taints of a particular category.
type: string
tolerationSeconds:
- description: TolerationSeconds represents the period
- of time the toleration (which must be of effect NoExecute,
- otherwise this field is ignored) tolerates the taint.
- By default, it is not set, which means tolerate the
- taint forever (do not evict). Zero and negative values
- will be treated as 0 (evict immediately) by the system.
+ description: |-
+ TolerationSeconds represents the period of time the toleration (which must be
+ of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default,
+ it is not set, which means tolerate the taint forever (do not evict). Zero and
+ negative values will be treated as 0 (evict immediately) by the system.
format: int64
type: integer
value:
- description: Value is the taint value the toleration
- matches to. If the operator is Exists, the value should
- be empty, otherwise just a regular string.
+ description: |-
+ Value is the taint value the toleration matches to.
+ If the operator is Exists, the value should be empty, otherwise just a regular string.
type: string
type: object
type: array
@@ -247,25 +259,31 @@ spec:
type: object
type: object
networkType:
- description: 'NetworkType is the plugin that is to be deployed (e.g.
- OVNKubernetes). This should match a value that the cluster-network-operator
- understands, or else no networking will be installed. Currently
- supported values are: - OVNKubernetes This field is immutable after
- installation.'
+ description: |-
+ NetworkType is the plugin that is to be deployed (e.g. OVNKubernetes).
+ This should match a value that the cluster-network-operator understands,
+ or else no networking will be installed.
+ Currently supported values are:
+ - OVNKubernetes
+ This field is immutable after installation.
type: string
serviceNetwork:
- description: IP address pool for services. Currently, we only support
- a single entry here. This field is immutable after installation.
+ description: |-
+ IP address pool for services.
+ Currently, we only support a single entry here.
+ This field is immutable after installation.
items:
type: string
type: array
x-kubernetes-list-type: atomic
serviceNodePortRange:
- description: The port range allowed for Services of type NodePort.
- If not specified, the default of 30000-32767 will be used. Such
- Services without a NodePort specified will have one automatically
- allocated from this range. This parameter can be updated after the
- cluster is installed.
+ description: |-
+ The port range allowed for Services of type NodePort.
+ If not specified, the default of 30000-32767 will be used.
+ Such Services without a NodePort specified will have one
+ automatically allocated from this range.
+ This parameter can be updated after the cluster is
+ installed.
pattern: ^([0-9]{1,4}|[1-5][0-9]{4}|6[0-4][0-9]{3}|65[0-4][0-9]{2}|655[0-2][0-9]|6553[0-5])-([0-9]{1,4}|[1-5][0-9]{4}|6[0-4][0-9]{3}|65[0-4][0-9]{2}|655[0-2][0-9]|6553[0-5])$
type: string
type: object
@@ -282,16 +300,17 @@ spec:
clusterNetwork:
description: IP address pool to use for pod IPs.
items:
- description: ClusterNetworkEntry is a contiguous block of IP addresses
- from which pod IPs are allocated.
+ description: |-
+ ClusterNetworkEntry is a contiguous block of IP addresses from which pod IPs
+ are allocated.
properties:
cidr:
description: The complete block for pod IPs.
type: string
hostPrefix:
- description: The size (prefix) of block to allocate to each
- node. If this field is not used by the plugin, it can be left
- unset.
+ description: |-
+ The size (prefix) of block to allocate to each node. If this
+ field is not used by the plugin, it can be left unset.
format: int32
minimum: 0
type: integer
@@ -302,46 +321,39 @@ spec:
description: ClusterNetworkMTU is the MTU for inter-pod networking.
type: integer
conditions:
- description: 'conditions represents the observations of a network.config
- current state. Known .status.conditions.type are: "NetworkDiagnosticsAvailable"'
+ description: |-
+ conditions represents the observations of a network.config current state.
+ Known .status.conditions.type are: "NetworkDiagnosticsAvailable"
items:
- description: "Condition contains details for one aspect of the current
- state of this API Resource. --- This struct is intended for direct
- use as an array at the field path .status.conditions. For example,
- \n type FooStatus struct{ // Represents the observations of a
- foo's current state. // Known .status.conditions.type are: \"Available\",
- \"Progressing\", and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge
- // +listType=map // +listMapKey=type Conditions []metav1.Condition
- `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\"
- protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields }"
+ description: Condition contains details for one aspect of the current
+ state of this API Resource.
properties:
lastTransitionTime:
- description: lastTransitionTime is the last time the condition
- transitioned from one status to another. This should be when
- the underlying condition changed. If that is not known, then
- using the time when the API field changed is acceptable.
+ description: |-
+ lastTransitionTime is the last time the condition transitioned from one status to another.
+ This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.
format: date-time
type: string
message:
- description: message is a human readable message indicating
- details about the transition. This may be an empty string.
+ description: |-
+ message is a human readable message indicating details about the transition.
+ This may be an empty string.
maxLength: 32768
type: string
observedGeneration:
- description: observedGeneration represents the .metadata.generation
- that the condition was set based upon. For instance, if .metadata.generation
- is currently 12, but the .status.conditions[x].observedGeneration
- is 9, the condition is out of date with respect to the current
- state of the instance.
+ description: |-
+ observedGeneration represents the .metadata.generation that the condition was set based upon.
+ For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
+ with respect to the current state of the instance.
format: int64
minimum: 0
type: integer
reason:
- description: reason contains a programmatic identifier indicating
- the reason for the condition's last transition. Producers
- of specific condition types may define expected values and
- meanings for this field, and whether the values are considered
- a guaranteed API. The value should be a CamelCase string.
+ description: |-
+ reason contains a programmatic identifier indicating the reason for the condition's last transition.
+ Producers of specific condition types may define expected values and meanings for this field,
+ and whether the values are considered a guaranteed API.
+ The value should be a CamelCase string.
This field may not be empty.
maxLength: 1024
minLength: 1
@@ -356,10 +368,6 @@ spec:
type: string
type:
description: type of condition in CamelCase or in foo.example.com/CamelCase.
- --- Many .condition.type values are consistent across resources
- like Available, but because arbitrary conditions can be useful
- (see .node.status.conditions), the ability to deconflict is
- important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
maxLength: 316
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
@@ -412,17 +420,19 @@ spec:
type: object
type: object
networkType:
- description: 'NetworkType is the target plugin that is being deployed.
- DEPRECATED: network type migration is no longer supported, so
- this should always be unset.'
+ description: |-
+ NetworkType is the target plugin that is being deployed.
+ DEPRECATED: network type migration is no longer supported,
+ so this should always be unset.
type: string
type: object
networkType:
description: NetworkType is the plugin that is deployed (e.g. OVNKubernetes).
type: string
serviceNetwork:
- description: IP address pool for services. Currently, we only support
- a single entry here.
+ description: |-
+ IP address pool for services.
+ Currently, we only support a single entry here.
items:
type: string
type: array
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_nodes-CustomNoUpgrade.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_nodes-CustomNoUpgrade.crd.yaml
new file mode 100644
index 0000000000000000000000000000000000000000..469400577aeef318d74d1b77b2c87a0f43b143e5
--- /dev/null
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_nodes-CustomNoUpgrade.crd.yaml
@@ -0,0 +1,158 @@
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+ annotations:
+ api-approved.openshift.io: https://github.com/openshift/api/pull/1107
+ api.openshift.io/merged-by-featuregates: "true"
+ include.release.openshift.io/ibm-cloud-managed: "true"
+ include.release.openshift.io/self-managed-high-availability: "true"
+ release.openshift.io/bootstrap-required: "true"
+ release.openshift.io/feature-set: CustomNoUpgrade
+ name: nodes.config.openshift.io
+spec:
+ group: config.openshift.io
+ names:
+ kind: Node
+ listKind: NodeList
+ plural: nodes
+ singular: node
+ scope: Cluster
+ versions:
+ - name: v1
+ schema:
+ openAPIV3Schema:
+ description: |-
+ Node holds cluster-wide information about node specific features.
+
+ Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
+ properties:
+ apiVersion:
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+ type: string
+ kind:
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+ type: string
+ metadata:
+ type: object
+ spec:
+ description: spec holds user settable values for configuration
+ properties:
+ cgroupMode:
+ description: CgroupMode determines the cgroups version on the node
+ enum:
+ - v1
+ - v2
+ - ""
+ type: string
+ minimumKubeletVersion:
+ description: |-
+ minimumKubeletVersion is the lowest version of a kubelet that can join the cluster.
+ Specifically, the apiserver will deny most authorization requests of kubelets that are older
+ than the specified version, only allowing the kubelet to get and update its node object, and perform
+ subjectaccessreviews.
+ This means any kubelet that attempts to join the cluster will not be able to run any assigned workloads,
+ and will eventually be marked as not ready.
+ Its max length is 8, so maximum version allowed is either "9.999.99" or "99.99.99".
+ Since the kubelet reports the version of the kubernetes release, not Openshift, this field references
+ the underlying kubernetes version this version of Openshift is based off of.
+ In other words: if an admin wishes to ensure no nodes run an older version than Openshift 4.17, then
+ they should set the minimumKubeletVersion to 1.30.0.
+ When comparing versions, the kubelet's version is stripped of any contents outside of major.minor.patch version.
+ Thus, a kubelet with version "1.0.0-ec.0" will be compatible with minimumKubeletVersion "1.0.0" or earlier.
+ maxLength: 8
+ type: string
+ x-kubernetes-validations:
+ - message: minmumKubeletVersion must be in a semver compatible format
+ of x.y.z, or empty
+ rule: self == "" || self.matches('^[0-9]*.[0-9]*.[0-9]*$')
+ workerLatencyProfile:
+ description: |-
+ WorkerLatencyProfile determins the how fast the kubelet is updating
+ the status and corresponding reaction of the cluster
+ enum:
+ - Default
+ - MediumUpdateAverageReaction
+ - LowUpdateSlowReaction
+ type: string
+ type: object
+ status:
+ description: status holds observed values.
+ properties:
+ conditions:
+ description: conditions contain the details and the current state
+ of the nodes.config object
+ items:
+ description: Condition contains details for one aspect of the current
+ state of this API Resource.
+ properties:
+ lastTransitionTime:
+ description: |-
+ lastTransitionTime is the last time the condition transitioned from one status to another.
+ This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.
+ format: date-time
+ type: string
+ message:
+ description: |-
+ message is a human readable message indicating details about the transition.
+ This may be an empty string.
+ maxLength: 32768
+ type: string
+ observedGeneration:
+ description: |-
+ observedGeneration represents the .metadata.generation that the condition was set based upon.
+ For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
+ with respect to the current state of the instance.
+ format: int64
+ minimum: 0
+ type: integer
+ reason:
+ description: |-
+ reason contains a programmatic identifier indicating the reason for the condition's last transition.
+ Producers of specific condition types may define expected values and meanings for this field,
+ and whether the values are considered a guaranteed API.
+ The value should be a CamelCase string.
+ This field may not be empty.
+ maxLength: 1024
+ minLength: 1
+ pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
+ type: string
+ status:
+ description: status of the condition, one of True, False, Unknown.
+ enum:
+ - "True"
+ - "False"
+ - Unknown
+ type: string
+ type:
+ description: type of condition in CamelCase or in foo.example.com/CamelCase.
+ maxLength: 316
+ pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
+ type: string
+ required:
+ - lastTransitionTime
+ - message
+ - reason
+ - status
+ - type
+ type: object
+ type: array
+ x-kubernetes-list-map-keys:
+ - type
+ x-kubernetes-list-type: map
+ type: object
+ required:
+ - spec
+ type: object
+ served: true
+ storage: true
+ subresources:
+ status: {}
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_nodes-Default.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_nodes-Default.crd.yaml
new file mode 100644
index 0000000000000000000000000000000000000000..b79a394c6e1d3189a0e0e271bd08f486dc9cfab5
--- /dev/null
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_nodes-Default.crd.yaml
@@ -0,0 +1,137 @@
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+ annotations:
+ api-approved.openshift.io: https://github.com/openshift/api/pull/1107
+ api.openshift.io/merged-by-featuregates: "true"
+ include.release.openshift.io/ibm-cloud-managed: "true"
+ include.release.openshift.io/self-managed-high-availability: "true"
+ release.openshift.io/bootstrap-required: "true"
+ release.openshift.io/feature-set: Default
+ name: nodes.config.openshift.io
+spec:
+ group: config.openshift.io
+ names:
+ kind: Node
+ listKind: NodeList
+ plural: nodes
+ singular: node
+ scope: Cluster
+ versions:
+ - name: v1
+ schema:
+ openAPIV3Schema:
+ description: |-
+ Node holds cluster-wide information about node specific features.
+
+ Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
+ properties:
+ apiVersion:
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+ type: string
+ kind:
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+ type: string
+ metadata:
+ type: object
+ spec:
+ description: spec holds user settable values for configuration
+ properties:
+ cgroupMode:
+ description: CgroupMode determines the cgroups version on the node
+ enum:
+ - v1
+ - v2
+ - ""
+ type: string
+ workerLatencyProfile:
+ description: |-
+ WorkerLatencyProfile determins the how fast the kubelet is updating
+ the status and corresponding reaction of the cluster
+ enum:
+ - Default
+ - MediumUpdateAverageReaction
+ - LowUpdateSlowReaction
+ type: string
+ type: object
+ status:
+ description: status holds observed values.
+ properties:
+ conditions:
+ description: conditions contain the details and the current state
+ of the nodes.config object
+ items:
+ description: Condition contains details for one aspect of the current
+ state of this API Resource.
+ properties:
+ lastTransitionTime:
+ description: |-
+ lastTransitionTime is the last time the condition transitioned from one status to another.
+ This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.
+ format: date-time
+ type: string
+ message:
+ description: |-
+ message is a human readable message indicating details about the transition.
+ This may be an empty string.
+ maxLength: 32768
+ type: string
+ observedGeneration:
+ description: |-
+ observedGeneration represents the .metadata.generation that the condition was set based upon.
+ For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
+ with respect to the current state of the instance.
+ format: int64
+ minimum: 0
+ type: integer
+ reason:
+ description: |-
+ reason contains a programmatic identifier indicating the reason for the condition's last transition.
+ Producers of specific condition types may define expected values and meanings for this field,
+ and whether the values are considered a guaranteed API.
+ The value should be a CamelCase string.
+ This field may not be empty.
+ maxLength: 1024
+ minLength: 1
+ pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
+ type: string
+ status:
+ description: status of the condition, one of True, False, Unknown.
+ enum:
+ - "True"
+ - "False"
+ - Unknown
+ type: string
+ type:
+ description: type of condition in CamelCase or in foo.example.com/CamelCase.
+ maxLength: 316
+ pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
+ type: string
+ required:
+ - lastTransitionTime
+ - message
+ - reason
+ - status
+ - type
+ type: object
+ type: array
+ x-kubernetes-list-map-keys:
+ - type
+ x-kubernetes-list-type: map
+ type: object
+ required:
+ - spec
+ type: object
+ served: true
+ storage: true
+ subresources:
+ status: {}
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_nodes-DevPreviewNoUpgrade.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_nodes-DevPreviewNoUpgrade.crd.yaml
new file mode 100644
index 0000000000000000000000000000000000000000..99b124d5728e1ec1b16ade300a37ff09a1760dff
--- /dev/null
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_nodes-DevPreviewNoUpgrade.crd.yaml
@@ -0,0 +1,158 @@
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+ annotations:
+ api-approved.openshift.io: https://github.com/openshift/api/pull/1107
+ api.openshift.io/merged-by-featuregates: "true"
+ include.release.openshift.io/ibm-cloud-managed: "true"
+ include.release.openshift.io/self-managed-high-availability: "true"
+ release.openshift.io/bootstrap-required: "true"
+ release.openshift.io/feature-set: DevPreviewNoUpgrade
+ name: nodes.config.openshift.io
+spec:
+ group: config.openshift.io
+ names:
+ kind: Node
+ listKind: NodeList
+ plural: nodes
+ singular: node
+ scope: Cluster
+ versions:
+ - name: v1
+ schema:
+ openAPIV3Schema:
+ description: |-
+ Node holds cluster-wide information about node specific features.
+
+ Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
+ properties:
+ apiVersion:
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+ type: string
+ kind:
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+ type: string
+ metadata:
+ type: object
+ spec:
+ description: spec holds user settable values for configuration
+ properties:
+ cgroupMode:
+ description: CgroupMode determines the cgroups version on the node
+ enum:
+ - v1
+ - v2
+ - ""
+ type: string
+ minimumKubeletVersion:
+ description: |-
+ minimumKubeletVersion is the lowest version of a kubelet that can join the cluster.
+ Specifically, the apiserver will deny most authorization requests of kubelets that are older
+ than the specified version, only allowing the kubelet to get and update its node object, and perform
+ subjectaccessreviews.
+ This means any kubelet that attempts to join the cluster will not be able to run any assigned workloads,
+ and will eventually be marked as not ready.
+ Its max length is 8, so maximum version allowed is either "9.999.99" or "99.99.99".
+ Since the kubelet reports the version of the kubernetes release, not Openshift, this field references
+ the underlying kubernetes version this version of Openshift is based off of.
+ In other words: if an admin wishes to ensure no nodes run an older version than Openshift 4.17, then
+ they should set the minimumKubeletVersion to 1.30.0.
+ When comparing versions, the kubelet's version is stripped of any contents outside of major.minor.patch version.
+ Thus, a kubelet with version "1.0.0-ec.0" will be compatible with minimumKubeletVersion "1.0.0" or earlier.
+ maxLength: 8
+ type: string
+ x-kubernetes-validations:
+ - message: minmumKubeletVersion must be in a semver compatible format
+ of x.y.z, or empty
+ rule: self == "" || self.matches('^[0-9]*.[0-9]*.[0-9]*$')
+ workerLatencyProfile:
+ description: |-
+ WorkerLatencyProfile determins the how fast the kubelet is updating
+ the status and corresponding reaction of the cluster
+ enum:
+ - Default
+ - MediumUpdateAverageReaction
+ - LowUpdateSlowReaction
+ type: string
+ type: object
+ status:
+ description: status holds observed values.
+ properties:
+ conditions:
+ description: conditions contain the details and the current state
+ of the nodes.config object
+ items:
+ description: Condition contains details for one aspect of the current
+ state of this API Resource.
+ properties:
+ lastTransitionTime:
+ description: |-
+ lastTransitionTime is the last time the condition transitioned from one status to another.
+ This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.
+ format: date-time
+ type: string
+ message:
+ description: |-
+ message is a human readable message indicating details about the transition.
+ This may be an empty string.
+ maxLength: 32768
+ type: string
+ observedGeneration:
+ description: |-
+ observedGeneration represents the .metadata.generation that the condition was set based upon.
+ For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
+ with respect to the current state of the instance.
+ format: int64
+ minimum: 0
+ type: integer
+ reason:
+ description: |-
+ reason contains a programmatic identifier indicating the reason for the condition's last transition.
+ Producers of specific condition types may define expected values and meanings for this field,
+ and whether the values are considered a guaranteed API.
+ The value should be a CamelCase string.
+ This field may not be empty.
+ maxLength: 1024
+ minLength: 1
+ pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
+ type: string
+ status:
+ description: status of the condition, one of True, False, Unknown.
+ enum:
+ - "True"
+ - "False"
+ - Unknown
+ type: string
+ type:
+ description: type of condition in CamelCase or in foo.example.com/CamelCase.
+ maxLength: 316
+ pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
+ type: string
+ required:
+ - lastTransitionTime
+ - message
+ - reason
+ - status
+ - type
+ type: object
+ type: array
+ x-kubernetes-list-map-keys:
+ - type
+ x-kubernetes-list-type: map
+ type: object
+ required:
+ - spec
+ type: object
+ served: true
+ storage: true
+ subresources:
+ status: {}
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_nodes-TechPreviewNoUpgrade.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_nodes-TechPreviewNoUpgrade.crd.yaml
new file mode 100644
index 0000000000000000000000000000000000000000..8db838df77226f1a1dd22e3a2b0869247b496975
--- /dev/null
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_nodes-TechPreviewNoUpgrade.crd.yaml
@@ -0,0 +1,158 @@
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+ annotations:
+ api-approved.openshift.io: https://github.com/openshift/api/pull/1107
+ api.openshift.io/merged-by-featuregates: "true"
+ include.release.openshift.io/ibm-cloud-managed: "true"
+ include.release.openshift.io/self-managed-high-availability: "true"
+ release.openshift.io/bootstrap-required: "true"
+ release.openshift.io/feature-set: TechPreviewNoUpgrade
+ name: nodes.config.openshift.io
+spec:
+ group: config.openshift.io
+ names:
+ kind: Node
+ listKind: NodeList
+ plural: nodes
+ singular: node
+ scope: Cluster
+ versions:
+ - name: v1
+ schema:
+ openAPIV3Schema:
+ description: |-
+ Node holds cluster-wide information about node specific features.
+
+ Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
+ properties:
+ apiVersion:
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+ type: string
+ kind:
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+ type: string
+ metadata:
+ type: object
+ spec:
+ description: spec holds user settable values for configuration
+ properties:
+ cgroupMode:
+ description: CgroupMode determines the cgroups version on the node
+ enum:
+ - v1
+ - v2
+ - ""
+ type: string
+ minimumKubeletVersion:
+ description: |-
+ minimumKubeletVersion is the lowest version of a kubelet that can join the cluster.
+ Specifically, the apiserver will deny most authorization requests of kubelets that are older
+ than the specified version, only allowing the kubelet to get and update its node object, and perform
+ subjectaccessreviews.
+ This means any kubelet that attempts to join the cluster will not be able to run any assigned workloads,
+ and will eventually be marked as not ready.
+ Its max length is 8, so maximum version allowed is either "9.999.99" or "99.99.99".
+ Since the kubelet reports the version of the kubernetes release, not Openshift, this field references
+ the underlying kubernetes version this version of Openshift is based off of.
+ In other words: if an admin wishes to ensure no nodes run an older version than Openshift 4.17, then
+ they should set the minimumKubeletVersion to 1.30.0.
+ When comparing versions, the kubelet's version is stripped of any contents outside of major.minor.patch version.
+ Thus, a kubelet with version "1.0.0-ec.0" will be compatible with minimumKubeletVersion "1.0.0" or earlier.
+ maxLength: 8
+ type: string
+ x-kubernetes-validations:
+ - message: minmumKubeletVersion must be in a semver compatible format
+ of x.y.z, or empty
+ rule: self == "" || self.matches('^[0-9]*.[0-9]*.[0-9]*$')
+ workerLatencyProfile:
+ description: |-
+ WorkerLatencyProfile determins the how fast the kubelet is updating
+ the status and corresponding reaction of the cluster
+ enum:
+ - Default
+ - MediumUpdateAverageReaction
+ - LowUpdateSlowReaction
+ type: string
+ type: object
+ status:
+ description: status holds observed values.
+ properties:
+ conditions:
+ description: conditions contain the details and the current state
+ of the nodes.config object
+ items:
+ description: Condition contains details for one aspect of the current
+ state of this API Resource.
+ properties:
+ lastTransitionTime:
+ description: |-
+ lastTransitionTime is the last time the condition transitioned from one status to another.
+ This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.
+ format: date-time
+ type: string
+ message:
+ description: |-
+ message is a human readable message indicating details about the transition.
+ This may be an empty string.
+ maxLength: 32768
+ type: string
+ observedGeneration:
+ description: |-
+ observedGeneration represents the .metadata.generation that the condition was set based upon.
+ For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
+ with respect to the current state of the instance.
+ format: int64
+ minimum: 0
+ type: integer
+ reason:
+ description: |-
+ reason contains a programmatic identifier indicating the reason for the condition's last transition.
+ Producers of specific condition types may define expected values and meanings for this field,
+ and whether the values are considered a guaranteed API.
+ The value should be a CamelCase string.
+ This field may not be empty.
+ maxLength: 1024
+ minLength: 1
+ pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
+ type: string
+ status:
+ description: status of the condition, one of True, False, Unknown.
+ enum:
+ - "True"
+ - "False"
+ - Unknown
+ type: string
+ type:
+ description: type of condition in CamelCase or in foo.example.com/CamelCase.
+ maxLength: 316
+ pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
+ type: string
+ required:
+ - lastTransitionTime
+ - message
+ - reason
+ - status
+ - type
+ type: object
+ type: array
+ x-kubernetes-list-map-keys:
+ - type
+ x-kubernetes-list-type: map
+ type: object
+ required:
+ - spec
+ type: object
+ served: true
+ storage: true
+ subresources:
+ status: {}
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_nodes.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_nodes.crd.yaml
deleted file mode 100644
index fdde91e74dc1d3b55245a744d20baaac864676aa..0000000000000000000000000000000000000000
--- a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_nodes.crd.yaml
+++ /dev/null
@@ -1,141 +0,0 @@
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
- annotations:
- api-approved.openshift.io: https://github.com/openshift/api/pull/1107
- api.openshift.io/merged-by-featuregates: "true"
- include.release.openshift.io/ibm-cloud-managed: "true"
- include.release.openshift.io/self-managed-high-availability: "true"
- release.openshift.io/bootstrap-required: "true"
- name: nodes.config.openshift.io
-spec:
- group: config.openshift.io
- names:
- kind: Node
- listKind: NodeList
- plural: nodes
- singular: node
- scope: Cluster
- versions:
- - name: v1
- schema:
- openAPIV3Schema:
- description: "Node holds cluster-wide information about node specific features.
- \n Compatibility level 1: Stable within a major release for a minimum of
- 12 months or 3 minor releases (whichever is longer)."
- properties:
- apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
- type: string
- kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
- type: string
- metadata:
- type: object
- spec:
- description: spec holds user settable values for configuration
- properties:
- cgroupMode:
- description: CgroupMode determines the cgroups version on the node
- enum:
- - v1
- - v2
- - ""
- type: string
- workerLatencyProfile:
- description: WorkerLatencyProfile determins the how fast the kubelet
- is updating the status and corresponding reaction of the cluster
- enum:
- - Default
- - MediumUpdateAverageReaction
- - LowUpdateSlowReaction
- type: string
- type: object
- status:
- description: status holds observed values.
- properties:
- conditions:
- description: conditions contain the details and the current state
- of the nodes.config object
- items:
- description: "Condition contains details for one aspect of the current
- state of this API Resource. --- This struct is intended for direct
- use as an array at the field path .status.conditions. For example,
- \n type FooStatus struct{ // Represents the observations of a
- foo's current state. // Known .status.conditions.type are: \"Available\",
- \"Progressing\", and \"Degraded\" // +patchMergeKey=type // +patchStrategy=merge
- // +listType=map // +listMapKey=type Conditions []metav1.Condition
- `json:\"conditions,omitempty\" patchStrategy:\"merge\" patchMergeKey:\"type\"
- protobuf:\"bytes,1,rep,name=conditions\"` \n // other fields }"
- properties:
- lastTransitionTime:
- description: lastTransitionTime is the last time the condition
- transitioned from one status to another. This should be when
- the underlying condition changed. If that is not known, then
- using the time when the API field changed is acceptable.
- format: date-time
- type: string
- message:
- description: message is a human readable message indicating
- details about the transition. This may be an empty string.
- maxLength: 32768
- type: string
- observedGeneration:
- description: observedGeneration represents the .metadata.generation
- that the condition was set based upon. For instance, if .metadata.generation
- is currently 12, but the .status.conditions[x].observedGeneration
- is 9, the condition is out of date with respect to the current
- state of the instance.
- format: int64
- minimum: 0
- type: integer
- reason:
- description: reason contains a programmatic identifier indicating
- the reason for the condition's last transition. Producers
- of specific condition types may define expected values and
- meanings for this field, and whether the values are considered
- a guaranteed API. The value should be a CamelCase string.
- This field may not be empty.
- maxLength: 1024
- minLength: 1
- pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
- type: string
- status:
- description: status of the condition, one of True, False, Unknown.
- enum:
- - "True"
- - "False"
- - Unknown
- type: string
- type:
- description: type of condition in CamelCase or in foo.example.com/CamelCase.
- --- Many .condition.type values are consistent across resources
- like Available, but because arbitrary conditions can be useful
- (see .node.status.conditions), the ability to deconflict is
- important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
- maxLength: 316
- pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
- type: string
- required:
- - lastTransitionTime
- - message
- - reason
- - status
- - type
- type: object
- type: array
- x-kubernetes-list-map-keys:
- - type
- x-kubernetes-list-type: map
- type: object
- required:
- - spec
- type: object
- served: true
- storage: true
- subresources:
- status: {}
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_oauths.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_oauths.crd.yaml
index dcce4d3afcf371bc0d2373e24d650ebaaa1b9251..a84df309c1e1c0a61bc1bc8a7fde69d47f601dd4 100644
--- a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_oauths.crd.yaml
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_oauths.crd.yaml
@@ -20,22 +20,27 @@ spec:
- name: v1
schema:
openAPIV3Schema:
- description: "OAuth holds cluster-wide information about OAuth. The canonical
- name is `cluster`. It is used to configure the integrated OAuth server.
- This configuration is only honored when the top level Authentication config
- has type set to IntegratedOAuth. \n Compatibility level 1: Stable within
- a major release for a minimum of 12 months or 3 minor releases (whichever
- is longer)."
+ description: |-
+ OAuth holds cluster-wide information about OAuth. The canonical name is `cluster`.
+ It is used to configure the integrated OAuth server.
+ This configuration is only honored when the top level Authentication config has type set to IntegratedOAuth.
+
+ Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -43,9 +48,9 @@ spec:
description: spec holds user settable values for configuration
properties:
identityProviders:
- description: identityProviders is an ordered list of ways for a user
- to identify themselves. When this list is empty, no identities are
- provisioned for users.
+ description: |-
+ identityProviders is an ordered list of ways for a user to identify themselves.
+ When this list is empty, no identities are provisioned for users.
items:
description: IdentityProvider provides identities for users authenticating
using credentials
@@ -55,15 +60,14 @@ spec:
BasicAuth IdP
properties:
ca:
- description: ca is an optional reference to a config map
- by name containing the PEM-encoded CA bundle. It is used
- as a trust anchor to validate the TLS certificate presented
- by the remote server. The key "ca.crt" is used to locate
- the data. If specified and the config map or expected
- key is not found, the identity provider is not honored.
- If the specified ca data is not valid, the identity provider
- is not honored. If empty, the default system roots are
- used. The namespace for this config map is openshift-config.
+ description: |-
+ ca is an optional reference to a config map by name containing the PEM-encoded CA bundle.
+ It is used as a trust anchor to validate the TLS certificate presented by the remote server.
+ The key "ca.crt" is used to locate the data.
+ If specified and the config map or expected key is not found, the identity provider is not honored.
+ If the specified ca data is not valid, the identity provider is not honored.
+ If empty, the default system roots are used.
+ The namespace for this config map is openshift-config.
properties:
name:
description: name is the metadata.name of the referenced
@@ -73,13 +77,12 @@ spec:
- name
type: object
tlsClientCert:
- description: tlsClientCert is an optional reference to a
- secret by name that contains the PEM-encoded TLS client
- certificate to present when connecting to the server.
- The key "tls.crt" is used to locate the data. If specified
- and the secret or expected key is not found, the identity
- provider is not honored. If the specified certificate
- data is not valid, the identity provider is not honored.
+ description: |-
+ tlsClientCert is an optional reference to a secret by name that contains the
+ PEM-encoded TLS client certificate to present when connecting to the server.
+ The key "tls.crt" is used to locate the data.
+ If specified and the secret or expected key is not found, the identity provider is not honored.
+ If the specified certificate data is not valid, the identity provider is not honored.
The namespace for this secret is openshift-config.
properties:
name:
@@ -90,13 +93,12 @@ spec:
- name
type: object
tlsClientKey:
- description: tlsClientKey is an optional reference to a
- secret by name that contains the PEM-encoded TLS private
- key for the client certificate referenced in tlsClientCert.
- The key "tls.key" is used to locate the data. If specified
- and the secret or expected key is not found, the identity
- provider is not honored. If the specified certificate
- data is not valid, the identity provider is not honored.
+ description: |-
+ tlsClientKey is an optional reference to a secret by name that contains the
+ PEM-encoded TLS private key for the client certificate referenced in tlsClientCert.
+ The key "tls.key" is used to locate the data.
+ If specified and the secret or expected key is not found, the identity provider is not honored.
+ If the specified certificate data is not valid, the identity provider is not honored.
The namespace for this secret is openshift-config.
properties:
name:
@@ -115,17 +117,15 @@ spec:
credentials
properties:
ca:
- description: ca is an optional reference to a config map
- by name containing the PEM-encoded CA bundle. It is used
- as a trust anchor to validate the TLS certificate presented
- by the remote server. The key "ca.crt" is used to locate
- the data. If specified and the config map or expected
- key is not found, the identity provider is not honored.
- If the specified ca data is not valid, the identity provider
- is not honored. If empty, the default system roots are
- used. This can only be configured when hostname is set
- to a non-empty value. The namespace for this config map
- is openshift-config.
+ description: |-
+ ca is an optional reference to a config map by name containing the PEM-encoded CA bundle.
+ It is used as a trust anchor to validate the TLS certificate presented by the remote server.
+ The key "ca.crt" is used to locate the data.
+ If specified and the config map or expected key is not found, the identity provider is not honored.
+ If the specified ca data is not valid, the identity provider is not honored.
+ If empty, the default system roots are used.
+ This can only be configured when hostname is set to a non-empty value.
+ The namespace for this config map is openshift-config.
properties:
name:
description: name is the metadata.name of the referenced
@@ -138,11 +138,11 @@ spec:
description: clientID is the oauth client ID
type: string
clientSecret:
- description: clientSecret is a required reference to the
- secret by name containing the oauth client secret. The
- key "clientSecret" is used to locate the data. If the
- secret or expected key is not found, the identity provider
- is not honored. The namespace for this secret is openshift-config.
+ description: |-
+ clientSecret is a required reference to the secret by name containing the oauth client secret.
+ The key "clientSecret" is used to locate the data.
+ If the secret or expected key is not found, the identity provider is not honored.
+ The namespace for this secret is openshift-config.
properties:
name:
description: name is the metadata.name of the referenced
@@ -152,10 +152,10 @@ spec:
- name
type: object
hostname:
- description: hostname is the optional domain (e.g. "mycompany.com")
- for use with a hosted instance of GitHub Enterprise. It
- must match the GitHub Enterprise settings value configured
- at /setup/settings#hostname.
+ description: |-
+ hostname is the optional domain (e.g. "mycompany.com") for use with a hosted instance of
+ GitHub Enterprise.
+ It must match the GitHub Enterprise settings value configured at /setup/settings#hostname.
type: string
organizations:
description: organizations optionally restricts which organizations
@@ -175,15 +175,14 @@ spec:
credentials
properties:
ca:
- description: ca is an optional reference to a config map
- by name containing the PEM-encoded CA bundle. It is used
- as a trust anchor to validate the TLS certificate presented
- by the remote server. The key "ca.crt" is used to locate
- the data. If specified and the config map or expected
- key is not found, the identity provider is not honored.
- If the specified ca data is not valid, the identity provider
- is not honored. If empty, the default system roots are
- used. The namespace for this config map is openshift-config.
+ description: |-
+ ca is an optional reference to a config map by name containing the PEM-encoded CA bundle.
+ It is used as a trust anchor to validate the TLS certificate presented by the remote server.
+ The key "ca.crt" is used to locate the data.
+ If specified and the config map or expected key is not found, the identity provider is not honored.
+ If the specified ca data is not valid, the identity provider is not honored.
+ If empty, the default system roots are used.
+ The namespace for this config map is openshift-config.
properties:
name:
description: name is the metadata.name of the referenced
@@ -196,11 +195,11 @@ spec:
description: clientID is the oauth client ID
type: string
clientSecret:
- description: clientSecret is a required reference to the
- secret by name containing the oauth client secret. The
- key "clientSecret" is used to locate the data. If the
- secret or expected key is not found, the identity provider
- is not honored. The namespace for this secret is openshift-config.
+ description: |-
+ clientSecret is a required reference to the secret by name containing the oauth client secret.
+ The key "clientSecret" is used to locate the data.
+ If the secret or expected key is not found, the identity provider is not honored.
+ The namespace for this secret is openshift-config.
properties:
name:
description: name is the metadata.name of the referenced
@@ -221,11 +220,11 @@ spec:
description: clientID is the oauth client ID
type: string
clientSecret:
- description: clientSecret is a required reference to the
- secret by name containing the oauth client secret. The
- key "clientSecret" is used to locate the data. If the
- secret or expected key is not found, the identity provider
- is not honored. The namespace for this secret is openshift-config.
+ description: |-
+ clientSecret is a required reference to the secret by name containing the oauth client secret.
+ The key "clientSecret" is used to locate the data.
+ If the secret or expected key is not found, the identity provider is not honored.
+ The namespace for this secret is openshift-config.
properties:
name:
description: name is the metadata.name of the referenced
@@ -244,13 +243,12 @@ spec:
file to validate credentials
properties:
fileData:
- description: fileData is a required reference to a secret
- by name containing the data to use as the htpasswd file.
- The key "htpasswd" is used to locate the data. If the
- secret or expected key is not found, the identity provider
- is not honored. If the specified htpasswd data is not
- valid, the identity provider is not honored. The namespace
- for this secret is openshift-config.
+ description: |-
+ fileData is a required reference to a secret by name containing the data to use as the htpasswd file.
+ The key "htpasswd" is used to locate the data.
+ If the secret or expected key is not found, the identity provider is not honored.
+ If the specified htpasswd data is not valid, the identity provider is not honored.
+ The namespace for this secret is openshift-config.
properties:
name:
description: name is the metadata.name of the referenced
@@ -265,15 +263,14 @@ spec:
password credentials
properties:
ca:
- description: ca is an optional reference to a config map
- by name containing the PEM-encoded CA bundle. It is used
- as a trust anchor to validate the TLS certificate presented
- by the remote server. The key "ca.crt" is used to locate
- the data. If specified and the config map or expected
- key is not found, the identity provider is not honored.
- If the specified ca data is not valid, the identity provider
- is not honored. If empty, the default system roots are
- used. The namespace for this config map is openshift-config.
+ description: |-
+ ca is an optional reference to a config map by name containing the PEM-encoded CA bundle.
+ It is used as a trust anchor to validate the TLS certificate presented by the remote server.
+ The key "ca.crt" is used to locate the data.
+ If specified and the config map or expected key is not found, the identity provider is not honored.
+ If the specified ca data is not valid, the identity provider is not honored.
+ If empty, the default system roots are used.
+ The namespace for this config map is openshift-config.
properties:
name:
description: name is the metadata.name of the referenced
@@ -286,13 +283,12 @@ spec:
description: domainName is required for keystone v3
type: string
tlsClientCert:
- description: tlsClientCert is an optional reference to a
- secret by name that contains the PEM-encoded TLS client
- certificate to present when connecting to the server.
- The key "tls.crt" is used to locate the data. If specified
- and the secret or expected key is not found, the identity
- provider is not honored. If the specified certificate
- data is not valid, the identity provider is not honored.
+ description: |-
+ tlsClientCert is an optional reference to a secret by name that contains the
+ PEM-encoded TLS client certificate to present when connecting to the server.
+ The key "tls.crt" is used to locate the data.
+ If specified and the secret or expected key is not found, the identity provider is not honored.
+ If the specified certificate data is not valid, the identity provider is not honored.
The namespace for this secret is openshift-config.
properties:
name:
@@ -303,13 +299,12 @@ spec:
- name
type: object
tlsClientKey:
- description: tlsClientKey is an optional reference to a
- secret by name that contains the PEM-encoded TLS private
- key for the client certificate referenced in tlsClientCert.
- The key "tls.key" is used to locate the data. If specified
- and the secret or expected key is not found, the identity
- provider is not honored. If the specified certificate
- data is not valid, the identity provider is not honored.
+ description: |-
+ tlsClientKey is an optional reference to a secret by name that contains the
+ PEM-encoded TLS private key for the client certificate referenced in tlsClientCert.
+ The key "tls.key" is used to locate the data.
+ If specified and the secret or expected key is not found, the identity provider is not honored.
+ If the specified certificate data is not valid, the identity provider is not honored.
The namespace for this secret is openshift-config.
properties:
name:
@@ -330,32 +325,32 @@ spec:
description: attributes maps LDAP attributes to identities
properties:
email:
- description: email is the list of attributes whose values
- should be used as the email address. Optional. If
- unspecified, no email is set for the identity
+ description: |-
+ email is the list of attributes whose values should be used as the email address. Optional.
+ If unspecified, no email is set for the identity
items:
type: string
type: array
id:
- description: id is the list of attributes whose values
- should be used as the user ID. Required. First non-empty
- attribute is used. At least one attribute is required.
- If none of the listed attribute have a value, authentication
- fails. LDAP standard identity attribute is "dn"
+ description: |-
+ id is the list of attributes whose values should be used as the user ID. Required.
+ First non-empty attribute is used. At least one attribute is required. If none of the listed
+ attribute have a value, authentication fails.
+ LDAP standard identity attribute is "dn"
items:
type: string
type: array
name:
- description: name is the list of attributes whose values
- should be used as the display name. Optional. If unspecified,
- no display name is set for the identity LDAP standard
- display name attribute is "cn"
+ description: |-
+ name is the list of attributes whose values should be used as the display name. Optional.
+ If unspecified, no display name is set for the identity
+ LDAP standard display name attribute is "cn"
items:
type: string
type: array
preferredUsername:
- description: preferredUsername is the list of attributes
- whose values should be used as the preferred username.
+ description: |-
+ preferredUsername is the list of attributes whose values should be used as the preferred username.
LDAP standard login attribute is "uid"
items:
type: string
@@ -366,12 +361,12 @@ spec:
the search phase.
type: string
bindPassword:
- description: bindPassword is an optional reference to a
- secret by name containing a password to bind with during
- the search phase. The key "bindPassword" is used to locate
- the data. If specified and the secret or expected key
- is not found, the identity provider is not honored. The
- namespace for this secret is openshift-config.
+ description: |-
+ bindPassword is an optional reference to a secret by name
+ containing a password to bind with during the search phase.
+ The key "bindPassword" is used to locate the data.
+ If specified and the secret or expected key is not found, the identity provider is not honored.
+ The namespace for this secret is openshift-config.
properties:
name:
description: name is the metadata.name of the referenced
@@ -381,15 +376,14 @@ spec:
- name
type: object
ca:
- description: ca is an optional reference to a config map
- by name containing the PEM-encoded CA bundle. It is used
- as a trust anchor to validate the TLS certificate presented
- by the remote server. The key "ca.crt" is used to locate
- the data. If specified and the config map or expected
- key is not found, the identity provider is not honored.
- If the specified ca data is not valid, the identity provider
- is not honored. If empty, the default system roots are
- used. The namespace for this config map is openshift-config.
+ description: |-
+ ca is an optional reference to a config map by name containing the PEM-encoded CA bundle.
+ It is used as a trust anchor to validate the TLS certificate presented by the remote server.
+ The key "ca.crt" is used to locate the data.
+ If specified and the config map or expected key is not found, the identity provider is not honored.
+ If the specified ca data is not valid, the identity provider is not honored.
+ If empty, the default system roots are used.
+ The namespace for this config map is openshift-config.
properties:
name:
description: name is the metadata.name of the referenced
@@ -399,45 +393,45 @@ spec:
- name
type: object
insecure:
- description: 'insecure, if true, indicates the connection
- should not use TLS WARNING: Should not be set to `true`
- with the URL scheme "ldaps://" as "ldaps://" URLs always
- attempt to connect using TLS, even when `insecure` is
- set to `true` When `true`, "ldap://" URLS connect insecurely.
- When `false`, "ldap://" URLs are upgraded to a TLS connection
- using StartTLS as specified in https://tools.ietf.org/html/rfc2830.'
+ description: |-
+ insecure, if true, indicates the connection should not use TLS
+ WARNING: Should not be set to `true` with the URL scheme "ldaps://" as "ldaps://" URLs always
+ attempt to connect using TLS, even when `insecure` is set to `true`
+ When `true`, "ldap://" URLS connect insecurely. When `false`, "ldap://" URLs are upgraded to
+ a TLS connection using StartTLS as specified in https://tools.ietf.org/html/rfc2830.
type: boolean
url:
- description: 'url is an RFC 2255 URL which specifies the
- LDAP search parameters to use. The syntax of the URL is:
- ldap://host:port/basedn?attribute?scope?filter'
+ description: |-
+ url is an RFC 2255 URL which specifies the LDAP search parameters to use.
+ The syntax of the URL is:
+ ldap://host:port/basedn?attribute?scope?filter
type: string
type: object
mappingMethod:
- description: mappingMethod determines how identities from this
- provider are mapped to users Defaults to "claim"
+ description: |-
+ mappingMethod determines how identities from this provider are mapped to users
+ Defaults to "claim"
type: string
name:
- description: 'name is used to qualify the identities returned
- by this provider. - It MUST be unique and not shared by any
- other identity provider used - It MUST be a valid path segment:
- name cannot equal "." or ".." or contain "/" or "%" or ":"
- Ref: https://godoc.org/github.com/openshift/origin/pkg/user/apis/user/validation#ValidateIdentityProviderName'
+ description: |-
+ name is used to qualify the identities returned by this provider.
+ - It MUST be unique and not shared by any other identity provider used
+ - It MUST be a valid path segment: name cannot equal "." or ".." or contain "/" or "%" or ":"
+ Ref: https://godoc.org/github.com/openshift/origin/pkg/user/apis/user/validation#ValidateIdentityProviderName
type: string
openID:
description: openID enables user authentication using OpenID
credentials
properties:
ca:
- description: ca is an optional reference to a config map
- by name containing the PEM-encoded CA bundle. It is used
- as a trust anchor to validate the TLS certificate presented
- by the remote server. The key "ca.crt" is used to locate
- the data. If specified and the config map or expected
- key is not found, the identity provider is not honored.
- If the specified ca data is not valid, the identity provider
- is not honored. If empty, the default system roots are
- used. The namespace for this config map is openshift-config.
+ description: |-
+ ca is an optional reference to a config map by name containing the PEM-encoded CA bundle.
+ It is used as a trust anchor to validate the TLS certificate presented by the remote server.
+ The key "ca.crt" is used to locate the data.
+ If specified and the config map or expected key is not found, the identity provider is not honored.
+ If the specified ca data is not valid, the identity provider is not honored.
+ If empty, the default system roots are used.
+ The namespace for this config map is openshift-config.
properties:
name:
description: name is the metadata.name of the referenced
@@ -450,39 +444,38 @@ spec:
description: claims mappings
properties:
email:
- description: email is the list of claims whose values
- should be used as the email address. Optional. If
- unspecified, no email is set for the identity
+ description: |-
+ email is the list of claims whose values should be used as the email address. Optional.
+ If unspecified, no email is set for the identity
items:
type: string
type: array
x-kubernetes-list-type: atomic
groups:
- description: groups is the list of claims value of which
- should be used to synchronize groups from the OIDC
- provider to OpenShift for the user. If multiple claims
- are specified, the first one with a non-empty value
- is used.
+ description: |-
+ groups is the list of claims value of which should be used to synchronize groups
+ from the OIDC provider to OpenShift for the user.
+ If multiple claims are specified, the first one with a non-empty value is used.
items:
- description: OpenIDClaim represents a claim retrieved
- from an OpenID provider's tokens or userInfo responses
+ description: |-
+ OpenIDClaim represents a claim retrieved from an OpenID provider's tokens or userInfo
+ responses
minLength: 1
type: string
type: array
x-kubernetes-list-type: atomic
name:
- description: name is the list of claims whose values
- should be used as the display name. Optional. If unspecified,
- no display name is set for the identity
+ description: |-
+ name is the list of claims whose values should be used as the display name. Optional.
+ If unspecified, no display name is set for the identity
items:
type: string
type: array
x-kubernetes-list-type: atomic
preferredUsername:
- description: preferredUsername is the list of claims
- whose values should be used as the preferred username.
- If unspecified, the preferred username is determined
- from the value of the sub claim
+ description: |-
+ preferredUsername is the list of claims whose values should be used as the preferred username.
+ If unspecified, the preferred username is determined from the value of the sub claim
items:
type: string
type: array
@@ -492,11 +485,11 @@ spec:
description: clientID is the oauth client ID
type: string
clientSecret:
- description: clientSecret is a required reference to the
- secret by name containing the oauth client secret. The
- key "clientSecret" is used to locate the data. If the
- secret or expected key is not found, the identity provider
- is not honored. The namespace for this secret is openshift-config.
+ description: |-
+ clientSecret is a required reference to the secret by name containing the oauth client secret.
+ The key "clientSecret" is used to locate the data.
+ If the secret or expected key is not found, the identity provider is not honored.
+ The namespace for this secret is openshift-config.
properties:
name:
description: name is the metadata.name of the referenced
@@ -518,9 +511,9 @@ spec:
type: string
type: array
issuer:
- description: issuer is the URL that the OpenID Provider
- asserts as its Issuer Identifier. It must use the https
- scheme with no query or fragment component.
+ description: |-
+ issuer is the URL that the OpenID Provider asserts as its Issuer Identifier.
+ It must use the https scheme with no query or fragment component.
type: string
type: object
requestHeader:
@@ -528,16 +521,14 @@ spec:
request header credentials
properties:
ca:
- description: ca is a required reference to a config map
- by name containing the PEM-encoded CA bundle. It is used
- as a trust anchor to validate the TLS certificate presented
- by the remote server. Specifically, it allows verification
- of incoming requests to prevent header spoofing. The key
- "ca.crt" is used to locate the data. If the config map
- or expected key is not found, the identity provider is
- not honored. If the specified ca data is not valid, the
- identity provider is not honored. The namespace for this
- config map is openshift-config.
+ description: |-
+ ca is a required reference to a config map by name containing the PEM-encoded CA bundle.
+ It is used as a trust anchor to validate the TLS certificate presented by the remote server.
+ Specifically, it allows verification of incoming requests to prevent header spoofing.
+ The key "ca.crt" is used to locate the data.
+ If the config map or expected key is not found, the identity provider is not honored.
+ If the specified ca data is not valid, the identity provider is not honored.
+ The namespace for this config map is openshift-config.
properties:
name:
description: name is the metadata.name of the referenced
@@ -547,18 +538,20 @@ spec:
- name
type: object
challengeURL:
- description: challengeURL is a URL to redirect unauthenticated
- /authorize requests to Unauthenticated requests from OAuth
- clients which expect WWW-Authenticate challenges will
- be redirected here. ${url} is replaced with the current
- URL, escaped to be safe in a query parameter https://www.example.com/sso-login?then=${url}
- ${query} is replaced with the current query string https://www.example.com/auth-proxy/oauth/authorize?${query}
+ description: |-
+ challengeURL is a URL to redirect unauthenticated /authorize requests to
+ Unauthenticated requests from OAuth clients which expect WWW-Authenticate challenges will be
+ redirected here.
+ ${url} is replaced with the current URL, escaped to be safe in a query parameter
+ https://www.example.com/sso-login?then=${url}
+ ${query} is replaced with the current query string
+ https://www.example.com/auth-proxy/oauth/authorize?${query}
Required when challenge is set to true.
type: string
clientCommonNames:
- description: clientCommonNames is an optional list of common
- names to require a match from. If empty, any client certificate
- validated against the clientCA bundle is considered authoritative.
+ description: |-
+ clientCommonNames is an optional list of common names to require a match from. If empty, any
+ client certificate validated against the clientCA bundle is considered authoritative.
items:
type: string
type: array
@@ -575,12 +568,13 @@ spec:
type: string
type: array
loginURL:
- description: loginURL is a URL to redirect unauthenticated
- /authorize requests to Unauthenticated requests from OAuth
- clients which expect interactive logins will be redirected
- here ${url} is replaced with the current URL, escaped
- to be safe in a query parameter https://www.example.com/sso-login?then=${url}
- ${query} is replaced with the current query string https://www.example.com/auth-proxy/oauth/authorize?${query}
+ description: |-
+ loginURL is a URL to redirect unauthenticated /authorize requests to
+ Unauthenticated requests from OAuth clients which expect interactive logins will be redirected here
+ ${url} is replaced with the current URL, escaped to be safe in a query parameter
+ https://www.example.com/sso-login?then=${url}
+ ${query} is replaced with the current query string
+ https://www.example.com/auth-proxy/oauth/authorize?${query}
Required when login is set to true.
type: string
nameHeaders:
@@ -608,14 +602,14 @@ spec:
page.
properties:
error:
- description: error is the name of a secret that specifies a go
- template to use to render error pages during the authentication
- or grant flow. The key "errors.html" is used to locate the template
- data. If specified and the secret or expected key is not found,
- the default error page is used. If the specified template is
- not valid, the default error page is used. If unspecified, the
- default error page is used. The namespace for this secret is
- openshift-config.
+ description: |-
+ error is the name of a secret that specifies a go template to use to render error pages
+ during the authentication or grant flow.
+ The key "errors.html" is used to locate the template data.
+ If specified and the secret or expected key is not found, the default error page is used.
+ If the specified template is not valid, the default error page is used.
+ If unspecified, the default error page is used.
+ The namespace for this secret is openshift-config.
properties:
name:
description: name is the metadata.name of the referenced secret
@@ -624,13 +618,13 @@ spec:
- name
type: object
login:
- description: login is the name of a secret that specifies a go
- template to use to render the login page. The key "login.html"
- is used to locate the template data. If specified and the secret
- or expected key is not found, the default login page is used.
- If the specified template is not valid, the default login page
- is used. If unspecified, the default login page is used. The
- namespace for this secret is openshift-config.
+ description: |-
+ login is the name of a secret that specifies a go template to use to render the login page.
+ The key "login.html" is used to locate the template data.
+ If specified and the secret or expected key is not found, the default login page is used.
+ If the specified template is not valid, the default login page is used.
+ If unspecified, the default login page is used.
+ The namespace for this secret is openshift-config.
properties:
name:
description: name is the metadata.name of the referenced secret
@@ -639,14 +633,14 @@ spec:
- name
type: object
providerSelection:
- description: providerSelection is the name of a secret that specifies
- a go template to use to render the provider selection page.
+ description: |-
+ providerSelection is the name of a secret that specifies a go template to use to render
+ the provider selection page.
The key "providers.html" is used to locate the template data.
- If specified and the secret or expected key is not found, the
- default provider selection page is used. If the specified template
- is not valid, the default provider selection page is used. If
- unspecified, the default provider selection page is used. The
- namespace for this secret is openshift-config.
+ If specified and the secret or expected key is not found, the default provider selection page is used.
+ If the specified template is not valid, the default provider selection page is used.
+ If unspecified, the default provider selection page is used.
+ The namespace for this secret is openshift-config.
properties:
name:
description: name is the metadata.name of the referenced secret
@@ -660,19 +654,20 @@ spec:
tokens
properties:
accessTokenInactivityTimeout:
- description: "accessTokenInactivityTimeout defines the token inactivity
- timeout for tokens granted by any client. The value represents
- the maximum amount of time that can occur between consecutive
- uses of the token. Tokens become invalid if they are not used
- within this temporal window. The user will need to acquire a
- new token to regain access once a token times out. Takes valid
- time duration string such as \"5m\", \"1.5h\" or \"2h45m\".
- The minimum allowed value for duration is 300s (5 minutes).
- If the timeout is configured per client, then that value takes
- precedence. If the timeout value is not specified and the client
- does not override the value, then tokens are valid until their
- lifetime. \n WARNING: existing tokens' timeout will not be affected
- (lowered) by changing this value"
+ description: |-
+ accessTokenInactivityTimeout defines the token inactivity timeout
+ for tokens granted by any client.
+ The value represents the maximum amount of time that can occur between
+ consecutive uses of the token. Tokens become invalid if they are not
+ used within this temporal window. The user will need to acquire a new
+ token to regain access once a token times out. Takes valid time
+ duration string such as "5m", "1.5h" or "2h45m". The minimum allowed
+ value for duration is 300s (5 minutes). If the timeout is configured
+ per client, then that value takes precedence. If the timeout value is
+ not specified and the client does not override the value, then tokens
+ are valid until their lifetime.
+
+ WARNING: existing tokens' timeout will not be affected (lowered) by changing this value
type: string
accessTokenInactivityTimeoutSeconds:
description: 'accessTokenInactivityTimeoutSeconds - DEPRECATED:
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_projects.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_projects.crd.yaml
index 2698a1f45924c12fdd4556733354878ee5f0e2d1..9f6614fa6be1da27d11644fd1235c41c49acc61a 100644
--- a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_projects.crd.yaml
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_projects.crd.yaml
@@ -20,19 +20,25 @@ spec:
- name: v1
schema:
openAPIV3Schema:
- description: "Project holds cluster-wide information about Project. The canonical
- name is `cluster` \n Compatibility level 1: Stable within a major release
- for a minimum of 12 months or 3 minor releases (whichever is longer)."
+ description: |-
+ Project holds cluster-wide information about Project. The canonical name is `cluster`
+
+ Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -45,10 +51,10 @@ spec:
endpoint
type: string
projectRequestTemplate:
- description: projectRequestTemplate is the template to use for creating
- projects in response to projectrequest. This must point to a template
- in 'openshift-config' namespace. It is optional. If it is not specified,
- a default template is used.
+ description: |-
+ projectRequestTemplate is the template to use for creating projects in response to projectrequest.
+ This must point to a template in 'openshift-config' namespace. It is optional.
+ If it is not specified, a default template is used.
properties:
name:
description: name is the metadata.name of the referenced project
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_schedulers-CustomNoUpgrade.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_schedulers-CustomNoUpgrade.crd.yaml
index 75f82a92557e46b8c5fc966e750a0c6cd51eb88a..f557085f8fd87dfce994f7f0e96970759105689c 100644
--- a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_schedulers-CustomNoUpgrade.crd.yaml
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_schedulers-CustomNoUpgrade.crd.yaml
@@ -21,20 +21,26 @@ spec:
- name: v1
schema:
openAPIV3Schema:
- description: "Scheduler holds cluster-wide config information to run the Kubernetes
- Scheduler and influence its placement decisions. The canonical name for
- this config is `cluster`. \n Compatibility level 1: Stable within a major
- release for a minimum of 12 months or 3 minor releases (whichever is longer)."
+ description: |-
+ Scheduler holds cluster-wide config information to run the Kubernetes Scheduler
+ and influence its placement decisions. The canonical name for this config is `cluster`.
+
+ Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -42,41 +48,46 @@ spec:
description: spec holds user settable values for configuration
properties:
defaultNodeSelector:
- description: 'defaultNodeSelector helps set the cluster-wide default
- node selector to restrict pod placement to specific nodes. This
- is applied to the pods created in all namespaces and creates an
- intersection with any existing nodeSelectors already set on a pod,
- additionally constraining that pod''s selector. For example, defaultNodeSelector:
- "type=user-node,region=east" would set nodeSelector field in pod
- spec to "type=user-node,region=east" to all pods created in all
- namespaces. Namespaces having project-wide node selectors won''t
- be impacted even if this field is set. This adds an annotation section
- to the namespace. For example, if a new namespace is created with
- node-selector=''type=user-node,region=east'', the annotation openshift.io/node-selector:
- type=user-node,region=east gets added to the project. When the openshift.io/node-selector
- annotation is set on the project the value is used in preference
- to the value we are setting for defaultNodeSelector field. For instance,
- openshift.io/node-selector: "type=user-node,region=west" means that
- the default of "type=user-node,region=east" set in defaultNodeSelector
- would not be applied.'
+ description: |-
+ defaultNodeSelector helps set the cluster-wide default node selector to
+ restrict pod placement to specific nodes. This is applied to the pods
+ created in all namespaces and creates an intersection with any existing
+ nodeSelectors already set on a pod, additionally constraining that pod's selector.
+ For example,
+ defaultNodeSelector: "type=user-node,region=east" would set nodeSelector
+ field in pod spec to "type=user-node,region=east" to all pods created
+ in all namespaces. Namespaces having project-wide node selectors won't be
+ impacted even if this field is set. This adds an annotation section to
+ the namespace.
+ For example, if a new namespace is created with
+ node-selector='type=user-node,region=east',
+ the annotation openshift.io/node-selector: type=user-node,region=east
+ gets added to the project. When the openshift.io/node-selector annotation
+ is set on the project the value is used in preference to the value we are setting
+ for defaultNodeSelector field.
+ For instance,
+ openshift.io/node-selector: "type=user-node,region=west" means
+ that the default of "type=user-node,region=east" set in defaultNodeSelector
+ would not be applied.
type: string
mastersSchedulable:
- description: 'MastersSchedulable allows masters nodes to be schedulable.
- When this flag is turned on, all the master nodes in the cluster
- will be made schedulable, so that workload pods can run on them.
- The default value for this field is false, meaning none of the master
- nodes are schedulable. Important Note: Once the workload pods start
- running on the master nodes, extreme care must be taken to ensure
- that cluster-critical control plane components are not impacted.
- Please turn on this field after doing due diligence.'
+ description: |-
+ MastersSchedulable allows masters nodes to be schedulable. When this flag is
+ turned on, all the master nodes in the cluster will be made schedulable,
+ so that workload pods can run on them. The default value for this field is false,
+ meaning none of the master nodes are schedulable.
+ Important Note: Once the workload pods start running on the master nodes,
+ extreme care must be taken to ensure that cluster-critical control plane components
+ are not impacted.
+ Please turn on this field after doing due diligence.
type: boolean
policy:
- description: 'DEPRECATED: the scheduler Policy API has been deprecated
- and will be removed in a future release. policy is a reference to
- a ConfigMap containing scheduler policy which has user specified
- predicates and priorities. If this ConfigMap is not available scheduler
- will default to use DefaultAlgorithmProvider. The namespace for
- this configmap is openshift-config.'
+ description: |-
+ DEPRECATED: the scheduler Policy API has been deprecated and will be removed in a future release.
+ policy is a reference to a ConfigMap containing scheduler policy which has
+ user specified predicates and priorities. If this ConfigMap is not available
+ scheduler will default to use DefaultAlgorithmProvider.
+ The namespace for this configmap is openshift-config.
properties:
name:
description: name is the metadata.name of the referenced config
@@ -86,10 +97,12 @@ spec:
- name
type: object
profile:
- description: "profile sets which scheduling profile should be set
- in order to configure scheduling decisions for new pods. \n Valid
- values are \"LowNodeUtilization\", \"HighNodeUtilization\", \"NoScoring\"
- Defaults to \"LowNodeUtilization\""
+ description: |-
+ profile sets which scheduling profile should be set in order to configure scheduling
+ decisions for new pods.
+
+ Valid values are "LowNodeUtilization", "HighNodeUtilization", "NoScoring"
+ Defaults to "LowNodeUtilization"
enum:
- ""
- LowNodeUtilization
@@ -101,16 +114,15 @@ spec:
the default behavior of existing scheduler profiles.
properties:
dynamicResourceAllocation:
- description: dynamicResourceAllocation allows to enable or disable
- dynamic resource allocation within the scheduler. Dynamic resource
- allocation is an API for requesting and sharing resources between
- pods and containers inside a pod. Third-party resource drivers
- are responsible for tracking and allocating resources. Different
- kinds of resources support arbitrary parameters for defining
- requirements and initialization. Valid values are Enabled, Disabled
- and omitted. When omitted, this means no opinion and the platform
- is left to choose a reasonable default, which is subject to
- change over time. The current default is Disabled.
+ description: |-
+ dynamicResourceAllocation allows to enable or disable dynamic resource allocation within the scheduler.
+ Dynamic resource allocation is an API for requesting and sharing resources between pods and containers inside a pod.
+ Third-party resource drivers are responsible for tracking and allocating resources.
+ Different kinds of resources support arbitrary parameters for defining requirements and initialization.
+ Valid values are Enabled, Disabled and omitted.
+ When omitted, this means no opinion and the platform is left to choose a reasonable default,
+ which is subject to change over time.
+ The current default is Disabled.
enum:
- ""
- Enabled
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_schedulers-Default.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_schedulers-Default.crd.yaml
index 30967909abd507b2db7cf6691191ba5e5904224b..cbfff13ab794a2d3ca6a913ea13585b922dac7e2 100644
--- a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_schedulers-Default.crd.yaml
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_schedulers-Default.crd.yaml
@@ -21,20 +21,26 @@ spec:
- name: v1
schema:
openAPIV3Schema:
- description: "Scheduler holds cluster-wide config information to run the Kubernetes
- Scheduler and influence its placement decisions. The canonical name for
- this config is `cluster`. \n Compatibility level 1: Stable within a major
- release for a minimum of 12 months or 3 minor releases (whichever is longer)."
+ description: |-
+ Scheduler holds cluster-wide config information to run the Kubernetes Scheduler
+ and influence its placement decisions. The canonical name for this config is `cluster`.
+
+ Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -42,41 +48,46 @@ spec:
description: spec holds user settable values for configuration
properties:
defaultNodeSelector:
- description: 'defaultNodeSelector helps set the cluster-wide default
- node selector to restrict pod placement to specific nodes. This
- is applied to the pods created in all namespaces and creates an
- intersection with any existing nodeSelectors already set on a pod,
- additionally constraining that pod''s selector. For example, defaultNodeSelector:
- "type=user-node,region=east" would set nodeSelector field in pod
- spec to "type=user-node,region=east" to all pods created in all
- namespaces. Namespaces having project-wide node selectors won''t
- be impacted even if this field is set. This adds an annotation section
- to the namespace. For example, if a new namespace is created with
- node-selector=''type=user-node,region=east'', the annotation openshift.io/node-selector:
- type=user-node,region=east gets added to the project. When the openshift.io/node-selector
- annotation is set on the project the value is used in preference
- to the value we are setting for defaultNodeSelector field. For instance,
- openshift.io/node-selector: "type=user-node,region=west" means that
- the default of "type=user-node,region=east" set in defaultNodeSelector
- would not be applied.'
+ description: |-
+ defaultNodeSelector helps set the cluster-wide default node selector to
+ restrict pod placement to specific nodes. This is applied to the pods
+ created in all namespaces and creates an intersection with any existing
+ nodeSelectors already set on a pod, additionally constraining that pod's selector.
+ For example,
+ defaultNodeSelector: "type=user-node,region=east" would set nodeSelector
+ field in pod spec to "type=user-node,region=east" to all pods created
+ in all namespaces. Namespaces having project-wide node selectors won't be
+ impacted even if this field is set. This adds an annotation section to
+ the namespace.
+ For example, if a new namespace is created with
+ node-selector='type=user-node,region=east',
+ the annotation openshift.io/node-selector: type=user-node,region=east
+ gets added to the project. When the openshift.io/node-selector annotation
+ is set on the project the value is used in preference to the value we are setting
+ for defaultNodeSelector field.
+ For instance,
+ openshift.io/node-selector: "type=user-node,region=west" means
+ that the default of "type=user-node,region=east" set in defaultNodeSelector
+ would not be applied.
type: string
mastersSchedulable:
- description: 'MastersSchedulable allows masters nodes to be schedulable.
- When this flag is turned on, all the master nodes in the cluster
- will be made schedulable, so that workload pods can run on them.
- The default value for this field is false, meaning none of the master
- nodes are schedulable. Important Note: Once the workload pods start
- running on the master nodes, extreme care must be taken to ensure
- that cluster-critical control plane components are not impacted.
- Please turn on this field after doing due diligence.'
+ description: |-
+ MastersSchedulable allows masters nodes to be schedulable. When this flag is
+ turned on, all the master nodes in the cluster will be made schedulable,
+ so that workload pods can run on them. The default value for this field is false,
+ meaning none of the master nodes are schedulable.
+ Important Note: Once the workload pods start running on the master nodes,
+ extreme care must be taken to ensure that cluster-critical control plane components
+ are not impacted.
+ Please turn on this field after doing due diligence.
type: boolean
policy:
- description: 'DEPRECATED: the scheduler Policy API has been deprecated
- and will be removed in a future release. policy is a reference to
- a ConfigMap containing scheduler policy which has user specified
- predicates and priorities. If this ConfigMap is not available scheduler
- will default to use DefaultAlgorithmProvider. The namespace for
- this configmap is openshift-config.'
+ description: |-
+ DEPRECATED: the scheduler Policy API has been deprecated and will be removed in a future release.
+ policy is a reference to a ConfigMap containing scheduler policy which has
+ user specified predicates and priorities. If this ConfigMap is not available
+ scheduler will default to use DefaultAlgorithmProvider.
+ The namespace for this configmap is openshift-config.
properties:
name:
description: name is the metadata.name of the referenced config
@@ -86,10 +97,12 @@ spec:
- name
type: object
profile:
- description: "profile sets which scheduling profile should be set
- in order to configure scheduling decisions for new pods. \n Valid
- values are \"LowNodeUtilization\", \"HighNodeUtilization\", \"NoScoring\"
- Defaults to \"LowNodeUtilization\""
+ description: |-
+ profile sets which scheduling profile should be set in order to configure scheduling
+ decisions for new pods.
+
+ Valid values are "LowNodeUtilization", "HighNodeUtilization", "NoScoring"
+ Defaults to "LowNodeUtilization"
enum:
- ""
- LowNodeUtilization
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_schedulers-DevPreviewNoUpgrade.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_schedulers-DevPreviewNoUpgrade.crd.yaml
index ae3060256661bdc19ee4f9f9a71d5a07b6fcd1a0..39aae9ecede800b93b35642d5641d29de3998e9a 100644
--- a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_schedulers-DevPreviewNoUpgrade.crd.yaml
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_schedulers-DevPreviewNoUpgrade.crd.yaml
@@ -21,20 +21,26 @@ spec:
- name: v1
schema:
openAPIV3Schema:
- description: "Scheduler holds cluster-wide config information to run the Kubernetes
- Scheduler and influence its placement decisions. The canonical name for
- this config is `cluster`. \n Compatibility level 1: Stable within a major
- release for a minimum of 12 months or 3 minor releases (whichever is longer)."
+ description: |-
+ Scheduler holds cluster-wide config information to run the Kubernetes Scheduler
+ and influence its placement decisions. The canonical name for this config is `cluster`.
+
+ Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -42,41 +48,46 @@ spec:
description: spec holds user settable values for configuration
properties:
defaultNodeSelector:
- description: 'defaultNodeSelector helps set the cluster-wide default
- node selector to restrict pod placement to specific nodes. This
- is applied to the pods created in all namespaces and creates an
- intersection with any existing nodeSelectors already set on a pod,
- additionally constraining that pod''s selector. For example, defaultNodeSelector:
- "type=user-node,region=east" would set nodeSelector field in pod
- spec to "type=user-node,region=east" to all pods created in all
- namespaces. Namespaces having project-wide node selectors won''t
- be impacted even if this field is set. This adds an annotation section
- to the namespace. For example, if a new namespace is created with
- node-selector=''type=user-node,region=east'', the annotation openshift.io/node-selector:
- type=user-node,region=east gets added to the project. When the openshift.io/node-selector
- annotation is set on the project the value is used in preference
- to the value we are setting for defaultNodeSelector field. For instance,
- openshift.io/node-selector: "type=user-node,region=west" means that
- the default of "type=user-node,region=east" set in defaultNodeSelector
- would not be applied.'
+ description: |-
+ defaultNodeSelector helps set the cluster-wide default node selector to
+ restrict pod placement to specific nodes. This is applied to the pods
+ created in all namespaces and creates an intersection with any existing
+ nodeSelectors already set on a pod, additionally constraining that pod's selector.
+ For example,
+ defaultNodeSelector: "type=user-node,region=east" would set nodeSelector
+ field in pod spec to "type=user-node,region=east" to all pods created
+ in all namespaces. Namespaces having project-wide node selectors won't be
+ impacted even if this field is set. This adds an annotation section to
+ the namespace.
+ For example, if a new namespace is created with
+ node-selector='type=user-node,region=east',
+ the annotation openshift.io/node-selector: type=user-node,region=east
+ gets added to the project. When the openshift.io/node-selector annotation
+ is set on the project the value is used in preference to the value we are setting
+ for defaultNodeSelector field.
+ For instance,
+ openshift.io/node-selector: "type=user-node,region=west" means
+ that the default of "type=user-node,region=east" set in defaultNodeSelector
+ would not be applied.
type: string
mastersSchedulable:
- description: 'MastersSchedulable allows masters nodes to be schedulable.
- When this flag is turned on, all the master nodes in the cluster
- will be made schedulable, so that workload pods can run on them.
- The default value for this field is false, meaning none of the master
- nodes are schedulable. Important Note: Once the workload pods start
- running on the master nodes, extreme care must be taken to ensure
- that cluster-critical control plane components are not impacted.
- Please turn on this field after doing due diligence.'
+ description: |-
+ MastersSchedulable allows masters nodes to be schedulable. When this flag is
+ turned on, all the master nodes in the cluster will be made schedulable,
+ so that workload pods can run on them. The default value for this field is false,
+ meaning none of the master nodes are schedulable.
+ Important Note: Once the workload pods start running on the master nodes,
+ extreme care must be taken to ensure that cluster-critical control plane components
+ are not impacted.
+ Please turn on this field after doing due diligence.
type: boolean
policy:
- description: 'DEPRECATED: the scheduler Policy API has been deprecated
- and will be removed in a future release. policy is a reference to
- a ConfigMap containing scheduler policy which has user specified
- predicates and priorities. If this ConfigMap is not available scheduler
- will default to use DefaultAlgorithmProvider. The namespace for
- this configmap is openshift-config.'
+ description: |-
+ DEPRECATED: the scheduler Policy API has been deprecated and will be removed in a future release.
+ policy is a reference to a ConfigMap containing scheduler policy which has
+ user specified predicates and priorities. If this ConfigMap is not available
+ scheduler will default to use DefaultAlgorithmProvider.
+ The namespace for this configmap is openshift-config.
properties:
name:
description: name is the metadata.name of the referenced config
@@ -86,10 +97,12 @@ spec:
- name
type: object
profile:
- description: "profile sets which scheduling profile should be set
- in order to configure scheduling decisions for new pods. \n Valid
- values are \"LowNodeUtilization\", \"HighNodeUtilization\", \"NoScoring\"
- Defaults to \"LowNodeUtilization\""
+ description: |-
+ profile sets which scheduling profile should be set in order to configure scheduling
+ decisions for new pods.
+
+ Valid values are "LowNodeUtilization", "HighNodeUtilization", "NoScoring"
+ Defaults to "LowNodeUtilization"
enum:
- ""
- LowNodeUtilization
@@ -101,16 +114,15 @@ spec:
the default behavior of existing scheduler profiles.
properties:
dynamicResourceAllocation:
- description: dynamicResourceAllocation allows to enable or disable
- dynamic resource allocation within the scheduler. Dynamic resource
- allocation is an API for requesting and sharing resources between
- pods and containers inside a pod. Third-party resource drivers
- are responsible for tracking and allocating resources. Different
- kinds of resources support arbitrary parameters for defining
- requirements and initialization. Valid values are Enabled, Disabled
- and omitted. When omitted, this means no opinion and the platform
- is left to choose a reasonable default, which is subject to
- change over time. The current default is Disabled.
+ description: |-
+ dynamicResourceAllocation allows to enable or disable dynamic resource allocation within the scheduler.
+ Dynamic resource allocation is an API for requesting and sharing resources between pods and containers inside a pod.
+ Third-party resource drivers are responsible for tracking and allocating resources.
+ Different kinds of resources support arbitrary parameters for defining requirements and initialization.
+ Valid values are Enabled, Disabled and omitted.
+ When omitted, this means no opinion and the platform is left to choose a reasonable default,
+ which is subject to change over time.
+ The current default is Disabled.
enum:
- ""
- Enabled
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_schedulers-TechPreviewNoUpgrade.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_schedulers-TechPreviewNoUpgrade.crd.yaml
index 5aa43ed4190c14ca33dc37818cc93d4a9f5d25a5..34b79b3f1fc288ad42ecc398ec5786d528c039de 100644
--- a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_schedulers-TechPreviewNoUpgrade.crd.yaml
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_schedulers-TechPreviewNoUpgrade.crd.yaml
@@ -21,20 +21,26 @@ spec:
- name: v1
schema:
openAPIV3Schema:
- description: "Scheduler holds cluster-wide config information to run the Kubernetes
- Scheduler and influence its placement decisions. The canonical name for
- this config is `cluster`. \n Compatibility level 1: Stable within a major
- release for a minimum of 12 months or 3 minor releases (whichever is longer)."
+ description: |-
+ Scheduler holds cluster-wide config information to run the Kubernetes Scheduler
+ and influence its placement decisions. The canonical name for this config is `cluster`.
+
+ Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -42,41 +48,46 @@ spec:
description: spec holds user settable values for configuration
properties:
defaultNodeSelector:
- description: 'defaultNodeSelector helps set the cluster-wide default
- node selector to restrict pod placement to specific nodes. This
- is applied to the pods created in all namespaces and creates an
- intersection with any existing nodeSelectors already set on a pod,
- additionally constraining that pod''s selector. For example, defaultNodeSelector:
- "type=user-node,region=east" would set nodeSelector field in pod
- spec to "type=user-node,region=east" to all pods created in all
- namespaces. Namespaces having project-wide node selectors won''t
- be impacted even if this field is set. This adds an annotation section
- to the namespace. For example, if a new namespace is created with
- node-selector=''type=user-node,region=east'', the annotation openshift.io/node-selector:
- type=user-node,region=east gets added to the project. When the openshift.io/node-selector
- annotation is set on the project the value is used in preference
- to the value we are setting for defaultNodeSelector field. For instance,
- openshift.io/node-selector: "type=user-node,region=west" means that
- the default of "type=user-node,region=east" set in defaultNodeSelector
- would not be applied.'
+ description: |-
+ defaultNodeSelector helps set the cluster-wide default node selector to
+ restrict pod placement to specific nodes. This is applied to the pods
+ created in all namespaces and creates an intersection with any existing
+ nodeSelectors already set on a pod, additionally constraining that pod's selector.
+ For example,
+ defaultNodeSelector: "type=user-node,region=east" would set nodeSelector
+ field in pod spec to "type=user-node,region=east" to all pods created
+ in all namespaces. Namespaces having project-wide node selectors won't be
+ impacted even if this field is set. This adds an annotation section to
+ the namespace.
+ For example, if a new namespace is created with
+ node-selector='type=user-node,region=east',
+ the annotation openshift.io/node-selector: type=user-node,region=east
+ gets added to the project. When the openshift.io/node-selector annotation
+ is set on the project the value is used in preference to the value we are setting
+ for defaultNodeSelector field.
+ For instance,
+ openshift.io/node-selector: "type=user-node,region=west" means
+ that the default of "type=user-node,region=east" set in defaultNodeSelector
+ would not be applied.
type: string
mastersSchedulable:
- description: 'MastersSchedulable allows masters nodes to be schedulable.
- When this flag is turned on, all the master nodes in the cluster
- will be made schedulable, so that workload pods can run on them.
- The default value for this field is false, meaning none of the master
- nodes are schedulable. Important Note: Once the workload pods start
- running on the master nodes, extreme care must be taken to ensure
- that cluster-critical control plane components are not impacted.
- Please turn on this field after doing due diligence.'
+ description: |-
+ MastersSchedulable allows masters nodes to be schedulable. When this flag is
+ turned on, all the master nodes in the cluster will be made schedulable,
+ so that workload pods can run on them. The default value for this field is false,
+ meaning none of the master nodes are schedulable.
+ Important Note: Once the workload pods start running on the master nodes,
+ extreme care must be taken to ensure that cluster-critical control plane components
+ are not impacted.
+ Please turn on this field after doing due diligence.
type: boolean
policy:
- description: 'DEPRECATED: the scheduler Policy API has been deprecated
- and will be removed in a future release. policy is a reference to
- a ConfigMap containing scheduler policy which has user specified
- predicates and priorities. If this ConfigMap is not available scheduler
- will default to use DefaultAlgorithmProvider. The namespace for
- this configmap is openshift-config.'
+ description: |-
+ DEPRECATED: the scheduler Policy API has been deprecated and will be removed in a future release.
+ policy is a reference to a ConfigMap containing scheduler policy which has
+ user specified predicates and priorities. If this ConfigMap is not available
+ scheduler will default to use DefaultAlgorithmProvider.
+ The namespace for this configmap is openshift-config.
properties:
name:
description: name is the metadata.name of the referenced config
@@ -86,10 +97,12 @@ spec:
- name
type: object
profile:
- description: "profile sets which scheduling profile should be set
- in order to configure scheduling decisions for new pods. \n Valid
- values are \"LowNodeUtilization\", \"HighNodeUtilization\", \"NoScoring\"
- Defaults to \"LowNodeUtilization\""
+ description: |-
+ profile sets which scheduling profile should be set in order to configure scheduling
+ decisions for new pods.
+
+ Valid values are "LowNodeUtilization", "HighNodeUtilization", "NoScoring"
+ Defaults to "LowNodeUtilization"
enum:
- ""
- LowNodeUtilization
@@ -101,16 +114,15 @@ spec:
the default behavior of existing scheduler profiles.
properties:
dynamicResourceAllocation:
- description: dynamicResourceAllocation allows to enable or disable
- dynamic resource allocation within the scheduler. Dynamic resource
- allocation is an API for requesting and sharing resources between
- pods and containers inside a pod. Third-party resource drivers
- are responsible for tracking and allocating resources. Different
- kinds of resources support arbitrary parameters for defining
- requirements and initialization. Valid values are Enabled, Disabled
- and omitted. When omitted, this means no opinion and the platform
- is left to choose a reasonable default, which is subject to
- change over time. The current default is Disabled.
+ description: |-
+ dynamicResourceAllocation allows to enable or disable dynamic resource allocation within the scheduler.
+ Dynamic resource allocation is an API for requesting and sharing resources between pods and containers inside a pod.
+ Third-party resource drivers are responsible for tracking and allocating resources.
+ Different kinds of resources support arbitrary parameters for defining requirements and initialization.
+ Valid values are Enabled, Disabled and omitted.
+ When omitted, this means no opinion and the platform is left to choose a reasonable default,
+ which is subject to change over time.
+ The current default is Disabled.
enum:
- ""
- Enabled
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_openshift-controller-manager_01_builds.crd.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_openshift-controller-manager_01_builds.crd.yaml
index 7de589bf1b71901107873b82c39f595577901973..34ca783627a90f036bc62fe2b4f1818cd8182259 100644
--- a/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_openshift-controller-manager_01_builds.crd.yaml
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_openshift-controller-manager_01_builds.crd.yaml
@@ -20,21 +20,28 @@ spec:
- name: v1
schema:
openAPIV3Schema:
- description: "Build configures the behavior of OpenShift builds for the entire
- cluster. This includes default settings that can be overridden in BuildConfig
- objects, and overrides which are applied to all builds. \n The canonical
- name is \"cluster\" \n Compatibility level 1: Stable within a major release
- for a minimum of 12 months or 3 minor releases (whichever is longer)."
+ description: |-
+ Build configures the behavior of OpenShift builds for the entire cluster.
+ This includes default settings that can be overridden in BuildConfig objects, and overrides which are applied to all builds.
+
+ The canonical name is "cluster"
+
+ Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -43,11 +50,13 @@ spec:
configuration
properties:
additionalTrustedCA:
- description: "AdditionalTrustedCA is a reference to a ConfigMap containing
- additional CAs that should be trusted for image pushes and pulls
- during builds. The namespace for this config map is openshift-config.
- \n DEPRECATED: Additional CAs for image pull and push should be
- set on image.config.openshift.io/cluster instead."
+ description: |-
+ AdditionalTrustedCA is a reference to a ConfigMap containing additional CAs that
+ should be trusted for image pushes and pulls during builds.
+ The namespace for this config map is openshift-config.
+
+ DEPRECATED: Additional CAs for image pull and push should be set on
+ image.config.openshift.io/cluster instead.
properties:
name:
description: name is the metadata.name of the referenced config
@@ -60,11 +69,12 @@ spec:
description: BuildDefaults controls the default information for Builds
properties:
defaultProxy:
- description: "DefaultProxy contains the default proxy settings
- for all build operations, including image pull/push and source
- download. \n Values can be overrode by setting the `HTTP_PROXY`,
- `HTTPS_PROXY`, and `NO_PROXY` environment variables in the build
- config's strategy."
+ description: |-
+ DefaultProxy contains the default proxy settings for all build operations, including image pull/push
+ and source download.
+
+ Values can be overrode by setting the `HTTP_PROXY`, `HTTPS_PROXY`, and `NO_PROXY` environment variables
+ in the build config's strategy.
properties:
httpProxy:
description: httpProxy is the URL of the proxy for HTTP requests. Empty
@@ -76,9 +86,9 @@ spec:
var.
type: string
noProxy:
- description: noProxy is a comma-separated list of hostnames
- and/or CIDRs and/or IPs for which the proxy should not be
- used. Empty means unset and will not result in an env var.
+ description: |-
+ noProxy is a comma-separated list of hostnames and/or CIDRs and/or IPs for which the proxy should not be used.
+ Empty means unset and will not result in an env var.
type: string
readinessEndpoints:
description: readinessEndpoints is a list of endpoints used
@@ -87,22 +97,30 @@ spec:
type: string
type: array
trustedCA:
- description: "trustedCA is a reference to a ConfigMap containing
- a CA certificate bundle. The trustedCA field should only
- be consumed by a proxy validator. The validator is responsible
- for reading the certificate bundle from the required key
- \"ca-bundle.crt\", merging it with the system default trust
- bundle, and writing the merged trust bundle to a ConfigMap
- named \"trusted-ca-bundle\" in the \"openshift-config-managed\"
- namespace. Clients that expect to make proxy connections
- must use the trusted-ca-bundle for all HTTPS requests to
- the proxy, and may use the trusted-ca-bundle for non-proxy
- HTTPS requests as well. \n The namespace for the ConfigMap
- referenced by trustedCA is \"openshift-config\". Here is
- an example ConfigMap (in yaml): \n apiVersion: v1 kind:
- ConfigMap metadata: name: user-ca-bundle namespace: openshift-config
- data: ca-bundle.crt: | -----BEGIN CERTIFICATE----- Custom
- CA certificate bundle. -----END CERTIFICATE-----"
+ description: |-
+ trustedCA is a reference to a ConfigMap containing a CA certificate bundle.
+ The trustedCA field should only be consumed by a proxy validator. The
+ validator is responsible for reading the certificate bundle from the required
+ key "ca-bundle.crt", merging it with the system default trust bundle,
+ and writing the merged trust bundle to a ConfigMap named "trusted-ca-bundle"
+ in the "openshift-config-managed" namespace. Clients that expect to make
+ proxy connections must use the trusted-ca-bundle for all HTTPS requests to
+ the proxy, and may use the trusted-ca-bundle for non-proxy HTTPS requests as
+ well.
+
+ The namespace for the ConfigMap referenced by trustedCA is
+ "openshift-config". Here is an example ConfigMap (in yaml):
+
+ apiVersion: v1
+ kind: ConfigMap
+ metadata:
+ name: user-ca-bundle
+ namespace: openshift-config
+ data:
+ ca-bundle.crt: |
+ -----BEGIN CERTIFICATE-----
+ Custom CA certificate bundle.
+ -----END CERTIFICATE-----
properties:
name:
description: name is the metadata.name of the referenced
@@ -113,9 +131,9 @@ spec:
type: object
type: object
env:
- description: Env is a set of default environment variables that
- will be applied to the build if the specified variables do not
- exist on the build
+ description: |-
+ Env is a set of default environment variables that will be applied to the
+ build if the specified variables do not exist on the build
items:
description: EnvVar represents an environment variable present
in a Container.
@@ -125,15 +143,16 @@ spec:
C_IDENTIFIER.
type: string
value:
- description: 'Variable references $(VAR_NAME) are expanded
- using the previously defined environment variables in
- the container and any service environment variables. If
- a variable cannot be resolved, the reference in the input
- string will be unchanged. Double $$ are reduced to a single
- $, which allows for escaping the $(VAR_NAME) syntax: i.e.
+ description: |-
+ Variable references $(VAR_NAME) are expanded
+ using the previously defined environment variables in the container and
+ any service environment variables. If a variable cannot be resolved,
+ the reference in the input string will be unchanged. Double $$ are reduced
+ to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e.
"$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
- Escaped references will never be expanded, regardless
- of whether the variable exists or not. Defaults to "".'
+ Escaped references will never be expanded, regardless of whether the variable
+ exists or not.
+ Defaults to "".
type: string
valueFrom:
description: Source for the environment variable's value.
@@ -147,14 +166,12 @@ spec:
type: string
name:
default: ""
- description: 'Name of the referent. This field is
- effectively required, but due to backwards compatibility
- is allowed to be empty. Instances of this type
- with an empty value here are almost certainly
- wrong. TODO: Add other useful fields. apiVersion,
- kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
- TODO: Drop `kubebuilder:default` when controller-gen
- doesn''t need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.'
+ description: |-
+ Name of the referent.
+ This field is effectively required, but due to backwards compatibility is
+ allowed to be empty. Instances of this type with an empty value here are
+ almost certainly wrong.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
type: string
optional:
description: Specify whether the ConfigMap or its
@@ -165,11 +182,9 @@ spec:
type: object
x-kubernetes-map-type: atomic
fieldRef:
- description: 'Selects a field of the pod: supports metadata.name,
- metadata.namespace, `metadata.labels[''<KEY>'']`,
- `metadata.annotations[''<KEY>'']`, spec.nodeName,
- spec.serviceAccountName, status.hostIP, status.podIP,
- status.podIPs.'
+ description: |-
+ Selects a field of the pod: supports metadata.name, metadata.namespace, `metadata.labels['<KEY>']`, `metadata.annotations['<KEY>']`,
+ spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
properties:
apiVersion:
description: Version of the schema the FieldPath
@@ -184,10 +199,9 @@ spec:
type: object
x-kubernetes-map-type: atomic
resourceFieldRef:
- description: 'Selects a resource of the container: only
- resources limits and requests (limits.cpu, limits.memory,
- limits.ephemeral-storage, requests.cpu, requests.memory
- and requests.ephemeral-storage) are currently supported.'
+ description: |-
+ Selects a resource of the container: only resources limits and requests
+ (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.
properties:
containerName:
description: 'Container name: required for volumes,
@@ -218,14 +232,12 @@ spec:
type: string
name:
default: ""
- description: 'Name of the referent. This field is
- effectively required, but due to backwards compatibility
- is allowed to be empty. Instances of this type
- with an empty value here are almost certainly
- wrong. TODO: Add other useful fields. apiVersion,
- kind, uid? More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
- TODO: Drop `kubebuilder:default` when controller-gen
- doesn''t need it https://github.com/kubernetes-sigs/kubebuilder/issues/3896.'
+ description: |-
+ Name of the referent.
+ This field is effectively required, but due to backwards compatibility is
+ allowed to be empty. Instances of this type with an empty value here are
+ almost certainly wrong.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
type: string
optional:
description: Specify whether the Secret or its key
@@ -241,10 +253,11 @@ spec:
type: object
type: array
gitProxy:
- description: "GitProxy contains the proxy settings for git operations
- only. If set, this will override any Proxy settings for all
- git commands, such as git clone. \n Values that are not set
- here will be inherited from DefaultProxy."
+ description: |-
+ GitProxy contains the proxy settings for git operations only. If set, this will override
+ any Proxy settings for all git commands, such as git clone.
+
+ Values that are not set here will be inherited from DefaultProxy.
properties:
httpProxy:
description: httpProxy is the URL of the proxy for HTTP requests. Empty
@@ -256,9 +269,9 @@ spec:
var.
type: string
noProxy:
- description: noProxy is a comma-separated list of hostnames
- and/or CIDRs and/or IPs for which the proxy should not be
- used. Empty means unset and will not result in an env var.
+ description: |-
+ noProxy is a comma-separated list of hostnames and/or CIDRs and/or IPs for which the proxy should not be used.
+ Empty means unset and will not result in an env var.
type: string
readinessEndpoints:
description: readinessEndpoints is a list of endpoints used
@@ -267,22 +280,30 @@ spec:
type: string
type: array
trustedCA:
- description: "trustedCA is a reference to a ConfigMap containing
- a CA certificate bundle. The trustedCA field should only
- be consumed by a proxy validator. The validator is responsible
- for reading the certificate bundle from the required key
- \"ca-bundle.crt\", merging it with the system default trust
- bundle, and writing the merged trust bundle to a ConfigMap
- named \"trusted-ca-bundle\" in the \"openshift-config-managed\"
- namespace. Clients that expect to make proxy connections
- must use the trusted-ca-bundle for all HTTPS requests to
- the proxy, and may use the trusted-ca-bundle for non-proxy
- HTTPS requests as well. \n The namespace for the ConfigMap
- referenced by trustedCA is \"openshift-config\". Here is
- an example ConfigMap (in yaml): \n apiVersion: v1 kind:
- ConfigMap metadata: name: user-ca-bundle namespace: openshift-config
- data: ca-bundle.crt: | -----BEGIN CERTIFICATE----- Custom
- CA certificate bundle. -----END CERTIFICATE-----"
+ description: |-
+ trustedCA is a reference to a ConfigMap containing a CA certificate bundle.
+ The trustedCA field should only be consumed by a proxy validator. The
+ validator is responsible for reading the certificate bundle from the required
+ key "ca-bundle.crt", merging it with the system default trust bundle,
+ and writing the merged trust bundle to a ConfigMap named "trusted-ca-bundle"
+ in the "openshift-config-managed" namespace. Clients that expect to make
+ proxy connections must use the trusted-ca-bundle for all HTTPS requests to
+ the proxy, and may use the trusted-ca-bundle for non-proxy HTTPS requests as
+ well.
+
+ The namespace for the ConfigMap referenced by trustedCA is
+ "openshift-config". Here is an example ConfigMap (in yaml):
+
+ apiVersion: v1
+ kind: ConfigMap
+ metadata:
+ name: user-ca-bundle
+ namespace: openshift-config
+ data:
+ ca-bundle.crt: |
+ -----BEGIN CERTIFICATE-----
+ Custom CA certificate bundle.
+ -----END CERTIFICATE-----
properties:
name:
description: name is the metadata.name of the referenced
@@ -293,9 +314,10 @@ spec:
type: object
type: object
imageLabels:
- description: ImageLabels is a list of docker labels that are applied
- to the resulting image. User can override a default label by
- providing a label with the same name in their Build/BuildConfig.
+ description: |-
+ ImageLabels is a list of docker labels that are applied to the resulting image.
+ User can override a default label by providing a label with the same name in their
+ Build/BuildConfig.
items:
properties:
name:
@@ -312,19 +334,28 @@ spec:
the build.
properties:
claims:
- description: "Claims lists the names of resources, defined
- in spec.resourceClaims, that are used by this container.
- \n This is an alpha field and requires enabling the DynamicResourceAllocation
- feature gate. \n This field is immutable. It can only be
- set for containers."
+ description: |-
+ Claims lists the names of resources, defined in spec.resourceClaims,
+ that are used by this container.
+
+ This is an alpha field and requires enabling the
+ DynamicResourceAllocation feature gate.
+
+ This field is immutable. It can only be set for containers.
items:
description: ResourceClaim references one entry in PodSpec.ResourceClaims.
properties:
name:
- description: Name must match the name of one entry in
- pod.spec.resourceClaims of the Pod where this field
- is used. It makes that resource available inside a
- container.
+ description: |-
+ Name must match the name of one entry in pod.spec.resourceClaims of
+ the Pod where this field is used. It makes that resource available
+ inside a container.
+ type: string
+ request:
+ description: |-
+ Request is the name chosen for a request in the referenced claim.
+ If empty, everything from the claim is made available, otherwise
+ only the result of this request.
type: string
required:
- name
@@ -340,8 +371,9 @@ spec:
- type: string
pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
x-kubernetes-int-or-string: true
- description: 'Limits describes the maximum amount of compute
- resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
+ description: |-
+ Limits describes the maximum amount of compute resources allowed.
+ More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
type: object
requests:
additionalProperties:
@@ -350,11 +382,11 @@ spec:
- type: string
pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
x-kubernetes-int-or-string: true
- description: 'Requests describes the minimum amount of compute
- resources required. If Requests is omitted for a container,
- it defaults to Limits if that is explicitly specified, otherwise
- to an implementation-defined value. Requests cannot exceed
- Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
+ description: |-
+ Requests describes the minimum amount of compute resources required.
+ If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,
+ otherwise to an implementation-defined value. Requests cannot exceed Limits.
+ More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
type: object
type: object
type: object
@@ -362,16 +394,17 @@ spec:
description: BuildOverrides controls override settings for builds
properties:
forcePull:
- description: ForcePull overrides, if set, the equivalent value
- in the builds, i.e. false disables force pull for all builds,
- true enables force pull for all builds, independently of what
- each build specifies itself
+ description: |-
+ ForcePull overrides, if set, the equivalent value in the builds,
+ i.e. false disables force pull for all builds,
+ true enables force pull for all builds,
+ independently of what each build specifies itself
type: boolean
imageLabels:
- description: ImageLabels is a list of docker labels that are applied
- to the resulting image. If user provided a label in their Build/BuildConfig
- with the same name as one in this list, the user's label will
- be overwritten.
+ description: |-
+ ImageLabels is a list of docker labels that are applied to the resulting image.
+ If user provided a label in their Build/BuildConfig with the same name as one in this
+ list, the user's label will be overwritten.
items:
properties:
name:
@@ -390,44 +423,43 @@ spec:
the build pod to fit on a node
type: object
tolerations:
- description: Tolerations is a list of Tolerations that will override
- any existing tolerations set on a build pod.
+ description: |-
+ Tolerations is a list of Tolerations that will override any existing
+ tolerations set on a build pod.
items:
- description: The pod this Toleration is attached to tolerates
- any taint that matches the triple <key,value,effect> using
- the matching operator <operator>.
+ description: |-
+ The pod this Toleration is attached to tolerates any taint that matches
+ the triple <key,value,effect> using the matching operator <operator>.
properties:
effect:
- description: Effect indicates the taint effect to match.
- Empty means match all taint effects. When specified, allowed
- values are NoSchedule, PreferNoSchedule and NoExecute.
+ description: |-
+ Effect indicates the taint effect to match. Empty means match all taint effects.
+ When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute.
type: string
key:
- description: Key is the taint key that the toleration applies
- to. Empty means match all taint keys. If the key is empty,
- operator must be Exists; this combination means to match
- all values and all keys.
+ description: |-
+ Key is the taint key that the toleration applies to. Empty means match all taint keys.
+ If the key is empty, operator must be Exists; this combination means to match all values and all keys.
type: string
operator:
- description: Operator represents a key's relationship to
- the value. Valid operators are Exists and Equal. Defaults
- to Equal. Exists is equivalent to wildcard for value,
- so that a pod can tolerate all taints of a particular
- category.
+ description: |-
+ Operator represents a key's relationship to the value.
+ Valid operators are Exists and Equal. Defaults to Equal.
+ Exists is equivalent to wildcard for value, so that a pod can
+ tolerate all taints of a particular category.
type: string
tolerationSeconds:
- description: TolerationSeconds represents the period of
- time the toleration (which must be of effect NoExecute,
- otherwise this field is ignored) tolerates the taint.
- By default, it is not set, which means tolerate the taint
- forever (do not evict). Zero and negative values will
- be treated as 0 (evict immediately) by the system.
+ description: |-
+ TolerationSeconds represents the period of time the toleration (which must be
+ of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default,
+ it is not set, which means tolerate the taint forever (do not evict). Zero and
+ negative values will be treated as 0 (evict immediately) by the system.
format: int64
type: integer
value:
- description: Value is the taint value the toleration matches
- to. If the operator is Exists, the value should be empty,
- otherwise just a regular string.
+ description: |-
+ Value is the taint value the toleration matches to.
+ If the operator is Exists, the value should be empty, otherwise just a regular string.
type: string
type: object
type: array
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.deepcopy.go b/vendor/github.com/openshift/api/config/v1/zz_generated.deepcopy.go
index 06934699847393716b6bc9403a1f104d370fec42..1b7fa44aad6da7b2f9462c8f180d0c2e63299e3f 100644
--- a/vendor/github.com/openshift/api/config/v1/zz_generated.deepcopy.go
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.deepcopy.go
@@ -245,6 +245,11 @@ func (in *AWSPlatformStatus) DeepCopyInto(out *AWSPlatformStatus) {
*out = make([]AWSResourceTag, len(*in))
copy(*out, *in)
}
+ if in.CloudLoadBalancerConfig != nil {
+ in, out := &in.CloudLoadBalancerConfig, &out.CloudLoadBalancerConfig
+ *out = new(CloudLoadBalancerConfig)
+ (*in).DeepCopyInto(*out)
+ }
return
}
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.featuregated-crd-manifests.yaml b/vendor/github.com/openshift/api/config/v1/zz_generated.featuregated-crd-manifests.yaml
index fa5dd4e31d3e82971d9d95c77358f07adebc2192..e14f69ff03553ed0990dfd0e3689c2c612e22052 100644
--- a/vendor/github.com/openshift/api/config/v1/zz_generated.featuregated-crd-manifests.yaml
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.featuregated-crd-manifests.yaml
@@ -310,9 +310,11 @@ infrastructures.config.openshift.io:
Capability: ""
Category: ""
FeatureGates:
+ - AWSClusterHostedDNS
- BareMetalLoadBalancer
- GCPClusterHostedDNS
- GCPLabelsTags
+ - NutanixMultiSubnets
- VSphereControlPlaneMachineSet
- VSphereMultiNetworks
- VSphereMultiVCenters
@@ -382,7 +384,8 @@ nodes.config.openshift.io:
CRDName: nodes.config.openshift.io
Capability: ""
Category: ""
- FeatureGates: []
+ FeatureGates:
+ - MinimumKubeletVersion
FilenameOperatorName: config-operator
FilenameOperatorOrdering: "01"
FilenameRunLevel: "0000_10"
diff --git a/vendor/github.com/openshift/api/config/v1/zz_generated.swagger_doc_generated.go b/vendor/github.com/openshift/api/config/v1/zz_generated.swagger_doc_generated.go
index c580bd8342e4488bfe76daaf27f78632023bc425..d0f50b0bc494a2e119f700a23574b12ca84b9507 100644
--- a/vendor/github.com/openshift/api/config/v1/zz_generated.swagger_doc_generated.go
+++ b/vendor/github.com/openshift/api/config/v1/zz_generated.swagger_doc_generated.go
@@ -1184,10 +1184,11 @@ func (AWSPlatformSpec) SwaggerDoc() map[string]string {
}
var map_AWSPlatformStatus = map[string]string{
- "": "AWSPlatformStatus holds the current status of the Amazon Web Services infrastructure provider.",
- "region": "region holds the default AWS region for new AWS resources created by the cluster.",
- "serviceEndpoints": "ServiceEndpoints list contains custom endpoints which will override default service endpoint of AWS Services. There must be only one ServiceEndpoint for a service.",
- "resourceTags": "resourceTags is a list of additional tags to apply to AWS resources created for the cluster. See https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html for information on tagging AWS resources. AWS supports a maximum of 50 tags per resource. OpenShift reserves 25 tags for its use, leaving 25 tags available for the user.",
+ "": "AWSPlatformStatus holds the current status of the Amazon Web Services infrastructure provider.",
+ "region": "region holds the default AWS region for new AWS resources created by the cluster.",
+ "serviceEndpoints": "ServiceEndpoints list contains custom endpoints which will override default service endpoint of AWS Services. There must be only one ServiceEndpoint for a service.",
+ "resourceTags": "resourceTags is a list of additional tags to apply to AWS resources created for the cluster. See https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html for information on tagging AWS resources. AWS supports a maximum of 50 tags per resource. OpenShift reserves 25 tags for its use, leaving 25 tags available for the user.",
+ "cloudLoadBalancerConfig": "cloudLoadBalancerConfig holds configuration related to DNS and cloud load balancers. It allows configuration of in-cluster DNS as an alternative to the platform default DNS implementation. When using the ClusterHosted DNS type, Load Balancer IP addresses must be provided for the API and internal API load balancers as well as the ingress load balancer.",
}
func (AWSPlatformStatus) SwaggerDoc() map[string]string {
@@ -1389,7 +1390,7 @@ var map_GCPPlatformStatus = map[string]string{
"region": "region holds the region for new GCP resources created for the cluster.",
"resourceLabels": "resourceLabels is a list of additional labels to apply to GCP resources created for the cluster. See https://cloud.google.com/compute/docs/labeling-resources for information on labeling GCP resources. GCP supports a maximum of 64 labels per resource. OpenShift reserves 32 labels for internal use, allowing 32 labels for user configuration.",
"resourceTags": "resourceTags is a list of additional tags to apply to GCP resources created for the cluster. See https://cloud.google.com/resource-manager/docs/tags/tags-overview for information on tagging GCP resources. GCP supports a maximum of 50 tags per resource.",
- "cloudLoadBalancerConfig": "cloudLoadBalancerConfig is a union that contains the IP addresses of API, API-Int and Ingress Load Balancers created on the cloud platform. These values would not be populated on on-prem platforms. These Load Balancer IPs are used to configure the in-cluster DNS instances for API, API-Int and Ingress services. `dnsType` is expected to be set to `ClusterHosted` when these Load Balancer IP addresses are populated and used.",
+ "cloudLoadBalancerConfig": "cloudLoadBalancerConfig holds configuration related to DNS and cloud load balancers. It allows configuration of in-cluster DNS as an alternative to the platform default DNS implementation. When using the ClusterHosted DNS type, Load Balancer IP addresses must be provided for the API and internal API load balancers as well as the ingress load balancer.",
}
func (GCPPlatformStatus) SwaggerDoc() map[string]string {
@@ -1518,7 +1519,7 @@ var map_NutanixFailureDomain = map[string]string{
"": "NutanixFailureDomain configures failure domain information for the Nutanix platform.",
"name": "name defines the unique name of a failure domain. Name is required and must be at most 64 characters in length. It must consist of only lower case alphanumeric characters and hyphens (-). It must start and end with an alphanumeric character. This value is arbitrary and is used to identify the failure domain within the platform.",
"cluster": "cluster is to identify the cluster (the Prism Element under management of the Prism Central), in which the Machine's VM will be created. The cluster identifier (uuid or name) can be obtained from the Prism Central console or using the prism_central API.",
- "subnets": "subnets holds a list of identifiers (one or more) of the cluster's network subnets for the Machine's VM to connect to. The subnet identifiers (uuid or name) can be obtained from the Prism Central console or using the prism_central API.",
+ "subnets": "subnets holds a list of identifiers (one or more) of the cluster's network subnets If the feature gate NutanixMultiSubnets is enabled, up to 32 subnets may be configured. for the Machine's VM to connect to. The subnet identifiers (uuid or name) can be obtained from the Prism Central console or using the prism_central API.",
}
func (NutanixFailureDomain) SwaggerDoc() map[string]string {
@@ -2087,8 +2088,9 @@ func (NodeList) SwaggerDoc() map[string]string {
}
var map_NodeSpec = map[string]string{
- "cgroupMode": "CgroupMode determines the cgroups version on the node",
- "workerLatencyProfile": "WorkerLatencyProfile determins the how fast the kubelet is updating the status and corresponding reaction of the cluster",
+ "cgroupMode": "CgroupMode determines the cgroups version on the node",
+ "workerLatencyProfile": "WorkerLatencyProfile determins the how fast the kubelet is updating the status and corresponding reaction of the cluster",
+ "minimumKubeletVersion": "minimumKubeletVersion is the lowest version of a kubelet that can join the cluster. Specifically, the apiserver will deny most authorization requests of kubelets that are older than the specified version, only allowing the kubelet to get and update its node object, and perform subjectaccessreviews. This means any kubelet that attempts to join the cluster will not be able to run any assigned workloads, and will eventually be marked as not ready. Its max length is 8, so maximum version allowed is either \"9.999.99\" or \"99.99.99\". Since the kubelet reports the version of the kubernetes release, not Openshift, this field references the underlying kubernetes version this version of Openshift is based off of. In other words: if an admin wishes to ensure no nodes run an older version than Openshift 4.17, then they should set the minimumKubeletVersion to 1.30.0. When comparing versions, the kubelet's version is stripped of any contents outside of major.minor.patch version. Thus, a kubelet with version \"1.0.0-ec.0\" will be compatible with minimumKubeletVersion \"1.0.0\" or earlier.",
}
func (NodeSpec) SwaggerDoc() map[string]string {
diff --git a/vendor/github.com/openshift/api/config/v1alpha1/types_cluster_image_policy.go b/vendor/github.com/openshift/api/config/v1alpha1/types_cluster_image_policy.go
index e3670f03e8990f8d19273cd1550fbcf2737d8bb5..14650fd48f4e124b8f24dba1542eec8b3d9561c2 100644
--- a/vendor/github.com/openshift/api/config/v1alpha1/types_cluster_image_policy.go
+++ b/vendor/github.com/openshift/api/config/v1alpha1/types_cluster_image_policy.go
@@ -41,6 +41,7 @@ type ClusterImagePolicySpec struct {
// If multiple scopes match a given image, only the policy requirements for the most specific scope apply. The policy requirements for more general scopes are ignored.
// In addition to setting a policy appropriate for your own deployed applications, make sure that a policy on the OpenShift image repositories
// quay.io/openshift-release-dev/ocp-release, quay.io/openshift-release-dev/ocp-v4.0-art-dev (or on a more general scope) allows deployment of the OpenShift images required for cluster operation.
+ // If a scope is configured in both the ClusterImagePolicy and the ImagePolicy, or if the scope in ImagePolicy is nested under one of the scopes from the ClusterImagePolicy, only the policy from the ClusterImagePolicy will be applied.
// For additional details about the format, please refer to the document explaining the docker transport field,
// which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker
// +kubebuilder:validation:Required
diff --git a/vendor/github.com/openshift/api/config/v1alpha1/types_image_policy.go b/vendor/github.com/openshift/api/config/v1alpha1/types_image_policy.go
index 7031110ff1ead60766904b757b220da51ef41cb3..a177ddb0d66bc4004cb567d0a5d5fabeae7c5dcc 100644
--- a/vendor/github.com/openshift/api/config/v1alpha1/types_image_policy.go
+++ b/vendor/github.com/openshift/api/config/v1alpha1/types_image_policy.go
@@ -40,6 +40,7 @@ type ImagePolicySpec struct {
// If multiple scopes match a given image, only the policy requirements for the most specific scope apply. The policy requirements for more general scopes are ignored.
// In addition to setting a policy appropriate for your own deployed applications, make sure that a policy on the OpenShift image repositories
// quay.io/openshift-release-dev/ocp-release, quay.io/openshift-release-dev/ocp-v4.0-art-dev (or on a more general scope) allows deployment of the OpenShift images required for cluster operation.
+ // If a scope is configured in both the ClusterImagePolicy and the ImagePolicy, or if the scope in ImagePolicy is nested under one of the scopes from the ClusterImagePolicy, only the policy from the ClusterImagePolicy will be applied.
// For additional details about the format, please refer to the document explaining the docker transport field,
// which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker
// +kubebuilder:validation:Required
diff --git a/vendor/github.com/openshift/api/config/v1alpha1/zz_generated.swagger_doc_generated.go b/vendor/github.com/openshift/api/config/v1alpha1/zz_generated.swagger_doc_generated.go
index 9da086efc56f13c0049657f8508ec41eae885e2a..55468f38dac6eb6db12560fe43c97975f89c8c21 100644
--- a/vendor/github.com/openshift/api/config/v1alpha1/zz_generated.swagger_doc_generated.go
+++ b/vendor/github.com/openshift/api/config/v1alpha1/zz_generated.swagger_doc_generated.go
@@ -102,7 +102,7 @@ func (ClusterImagePolicyList) SwaggerDoc() map[string]string {
var map_ClusterImagePolicySpec = map[string]string{
"": "CLusterImagePolicySpec is the specification of the ClusterImagePolicy custom resource.",
- "scopes": "scopes defines the list of image identities assigned to a policy. Each item refers to a scope in a registry implementing the \"Docker Registry HTTP API V2\". Scopes matching individual images are named Docker references in the fully expanded form, either using a tag or digest. For example, docker.io/library/busybox:latest (not busybox:latest). More general scopes are prefixes of individual-image scopes, and specify a repository (by omitting the tag or digest), a repository namespace, or a registry host (by only specifying the host name and possibly a port number) or a wildcard expression starting with `*.`, for matching all subdomains (not including a port number). Wildcards are only supported for subdomain matching, and may not be used in the middle of the host, i.e. *.example.com is a valid case, but example*.*.com is not. If multiple scopes match a given image, only the policy requirements for the most specific scope apply. The policy requirements for more general scopes are ignored. In addition to setting a policy appropriate for your own deployed applications, make sure that a policy on the OpenShift image repositories quay.io/openshift-release-dev/ocp-release, quay.io/openshift-release-dev/ocp-v4.0-art-dev (or on a more general scope) allows deployment of the OpenShift images required for cluster operation. For additional details about the format, please refer to the document explaining the docker transport field, which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker",
+ "scopes": "scopes defines the list of image identities assigned to a policy. Each item refers to a scope in a registry implementing the \"Docker Registry HTTP API V2\". Scopes matching individual images are named Docker references in the fully expanded form, either using a tag or digest. For example, docker.io/library/busybox:latest (not busybox:latest). More general scopes are prefixes of individual-image scopes, and specify a repository (by omitting the tag or digest), a repository namespace, or a registry host (by only specifying the host name and possibly a port number) or a wildcard expression starting with `*.`, for matching all subdomains (not including a port number). Wildcards are only supported for subdomain matching, and may not be used in the middle of the host, i.e. *.example.com is a valid case, but example*.*.com is not. If multiple scopes match a given image, only the policy requirements for the most specific scope apply. The policy requirements for more general scopes are ignored. In addition to setting a policy appropriate for your own deployed applications, make sure that a policy on the OpenShift image repositories quay.io/openshift-release-dev/ocp-release, quay.io/openshift-release-dev/ocp-v4.0-art-dev (or on a more general scope) allows deployment of the OpenShift images required for cluster operation. If a scope is configured in both the ClusterImagePolicy and the ImagePolicy, or if the scope in ImagePolicy is nested under one of the scopes from the ClusterImagePolicy, only the policy from the ClusterImagePolicy will be applied. For additional details about the format, please refer to the document explaining the docker transport field, which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker",
"policy": "policy contains configuration to allow scopes to be verified, and defines how images not matching the verification policy will be treated.",
}
@@ -151,7 +151,7 @@ func (ImagePolicyList) SwaggerDoc() map[string]string {
var map_ImagePolicySpec = map[string]string{
"": "ImagePolicySpec is the specification of the ImagePolicy CRD.",
- "scopes": "scopes defines the list of image identities assigned to a policy. Each item refers to a scope in a registry implementing the \"Docker Registry HTTP API V2\". Scopes matching individual images are named Docker references in the fully expanded form, either using a tag or digest. For example, docker.io/library/busybox:latest (not busybox:latest). More general scopes are prefixes of individual-image scopes, and specify a repository (by omitting the tag or digest), a repository namespace, or a registry host (by only specifying the host name and possibly a port number) or a wildcard expression starting with `*.`, for matching all subdomains (not including a port number). Wildcards are only supported for subdomain matching, and may not be used in the middle of the host, i.e. *.example.com is a valid case, but example*.*.com is not. If multiple scopes match a given image, only the policy requirements for the most specific scope apply. The policy requirements for more general scopes are ignored. In addition to setting a policy appropriate for your own deployed applications, make sure that a policy on the OpenShift image repositories quay.io/openshift-release-dev/ocp-release, quay.io/openshift-release-dev/ocp-v4.0-art-dev (or on a more general scope) allows deployment of the OpenShift images required for cluster operation. For additional details about the format, please refer to the document explaining the docker transport field, which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker",
+ "scopes": "scopes defines the list of image identities assigned to a policy. Each item refers to a scope in a registry implementing the \"Docker Registry HTTP API V2\". Scopes matching individual images are named Docker references in the fully expanded form, either using a tag or digest. For example, docker.io/library/busybox:latest (not busybox:latest). More general scopes are prefixes of individual-image scopes, and specify a repository (by omitting the tag or digest), a repository namespace, or a registry host (by only specifying the host name and possibly a port number) or a wildcard expression starting with `*.`, for matching all subdomains (not including a port number). Wildcards are only supported for subdomain matching, and may not be used in the middle of the host, i.e. *.example.com is a valid case, but example*.*.com is not. If multiple scopes match a given image, only the policy requirements for the most specific scope apply. The policy requirements for more general scopes are ignored. In addition to setting a policy appropriate for your own deployed applications, make sure that a policy on the OpenShift image repositories quay.io/openshift-release-dev/ocp-release, quay.io/openshift-release-dev/ocp-v4.0-art-dev (or on a more general scope) allows deployment of the OpenShift images required for cluster operation. If a scope is configured in both the ClusterImagePolicy and the ImagePolicy, or if the scope in ImagePolicy is nested under one of the scopes from the ClusterImagePolicy, only the policy from the ClusterImagePolicy will be applied. For additional details about the format, please refer to the document explaining the docker transport field, which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker",
"policy": "policy contains configuration to allow scopes to be verified, and defines how images not matching the verification policy will be treated.",
}
diff --git a/vendor/github.com/openshift/api/console/v1/types_console_plugin.go b/vendor/github.com/openshift/api/console/v1/types_console_plugin.go
index 24954687d530fdbcf533179dd7ac35c5e6308772..534a41ca761a7b8a9ebd89141a2a211faadc4d42 100644
--- a/vendor/github.com/openshift/api/console/v1/types_console_plugin.go
+++ b/vendor/github.com/openshift/api/console/v1/types_console_plugin.go
@@ -43,11 +43,137 @@ type ConsolePluginSpec struct {
Backend ConsolePluginBackend `json:"backend"`
// proxy is a list of proxies that describe various service type
// to which the plugin needs to connect to.
+ // +listType=atomic
// +optional
Proxy []ConsolePluginProxy `json:"proxy,omitempty"`
// i18n is the configuration of plugin's localization resources.
// +optional
I18n ConsolePluginI18n `json:"i18n"`
+ // contentSecurityPolicy is a list of Content-Security-Policy (CSP) directives for the plugin.
+ // Each directive specifies a list of values, appropriate for the given directive type,
+ // for example a list of remote endpoints for fetch directives such as ScriptSrc.
+ // Console web application uses CSP to detect and mitigate certain types of attacks,
+ // such as cross-site scripting (XSS) and data injection attacks.
+ // Dynamic plugins should specify this field if need to load assets from outside
+ // the cluster or if violation reports are observed. Dynamic plugins should always prefer
+ // loading their assets from within the cluster, either by vendoring them, or fetching
+ // from a cluster service.
+ // CSP violation reports can be viewed in the browser's console logs during development and
+ // testing of the plugin in the OpenShift web console.
+ // Available directive types are DefaultSrc, ScriptSrc, StyleSrc, ImgSrc and FontSrc.
+ // Each of the available directives may be defined only once in the list.
+ // The value 'self' is automatically included in all fetch directives by the OpenShift web
+ // console's backend.
+ // For more information about the CSP directives, see:
+ // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy
+ //
+ // The OpenShift web console server aggregates the CSP directives and values across
+ // its own default values and all enabled ConsolePlugin CRs, merging them into a single
+ // policy string that is sent to the browser via `Content-Security-Policy` HTTP response header.
+ //
+ // Example:
+ // ConsolePlugin A directives:
+ // script-src: https://script1.com/, https://script2.com/
+ // font-src: https://font1.com/
+ //
+ // ConsolePlugin B directives:
+ // script-src: https://script2.com/, https://script3.com/
+ // font-src: https://font2.com/
+ // img-src: https://img1.com/
+ //
+ // Unified set of CSP directives, passed to the OpenShift web console server:
+ // script-src: https://script1.com/, https://script2.com/, https://script3.com/
+ // font-src: https://font1.com/, https://font2.com/
+ // img-src: https://img1.com/
+ //
+ // OpenShift web console server CSP response header:
+ // Content-Security-Policy: default-src 'self'; base-uri 'self'; script-src 'self' https://script1.com/ https://script2.com/ https://script3.com/; font-src 'self' https://font1.com/ https://font2.com/; img-src 'self' https://img1.com/; style-src 'self'; frame-src 'none'; object-src 'none'
+ //
+ // +openshift:enable:FeatureGate=ConsolePluginContentSecurityPolicy
+ // +kubebuilder:validation:MaxItems=5
+ // +kubebuilder:validation:XValidation:rule="self.map(x, x.values.map(y, y.size()).sum()).sum() < 8192",message="the total combined size of values of all directives must not exceed 8192 (8kb)"
+ // +listType=map
+ // +listMapKey=directive
+ // +optional
+ ContentSecurityPolicy []ConsolePluginCSP `json:"contentSecurityPolicy"`
+}
+
+// DirectiveType is an enumeration of OpenShift web console supported CSP directives.
+// LoadType is an enumeration of i18n loading types.
+// +kubebuilder:validation:Enum:="DefaultSrc";"ScriptSrc";"StyleSrc";"ImgSrc";"FontSrc"
+// +enum
+type DirectiveType string
+
+const (
+ // DefaultSrc directive serves as a fallback for the other CSP fetch directives.
+ // For more information about the DefaultSrc directive, see:
+ // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/default-src
+ DefaultSrc DirectiveType = "DefaultSrc"
+ // ScriptSrc directive specifies valid sources for JavaScript.
+ // For more information about the ScriptSrc directive, see:
+ // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/script-src
+ ScriptSrc DirectiveType = "ScriptSrc"
+ // StyleSrc directive specifies valid sources for stylesheets.
+ // For more information about the StyleSrc directive, see:
+ // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/style-src
+ StyleSrc DirectiveType = "StyleSrc"
+ // ImgSrc directive specifies a valid sources of images and favicons.
+ // For more information about the ImgSrc directive, see:
+ // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/img-src
+ ImgSrc DirectiveType = "ImgSrc"
+ // FontSrc directive specifies valid sources for fonts loaded using @font-face.
+ // For more information about the FontSrcdirective, see:
+ // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/font-src
+ FontSrc DirectiveType = "FontSrc"
+)
+
+// CSPDirectiveValue is single value for a Content-Security-Policy directive.
+// Each directive value must have a maximum length of 1024 characters and must not contain
+// whitespace, commas (,), semicolons (;) or single quotes ('). The value '*' is not permitted.
+// +kubebuilder:validation:MinLength=1
+// +kubebuilder:validation:MaxLength=1024
+// +kubebuilder:validation:XValidation:rule="!self.contains(\"'\")",message="CSP directive value cannot contain a quote"
+// +kubebuilder:validation:XValidation:rule="!self.matches('\\\\s')",message="CSP directive value cannot contain a whitespace"
+// +kubebuilder:validation:XValidation:rule="!self.contains(',')",message="CSP directive value cannot contain a comma"
+// +kubebuilder:validation:XValidation:rule="!self.contains(';')",message="CSP directive value cannot contain a semi-colon"
+// +kubebuilder:validation:XValidation:rule="self != '*'",message="CSP directive value cannot be a wildcard"
+type CSPDirectiveValue string
+
+// ConsolePluginCSP holds configuration for a specific CSP directive
+type ConsolePluginCSP struct {
+ // directive specifies which Content-Security-Policy directive to configure.
+ // Available directive types are DefaultSrc, ScriptSrc, StyleSrc, ImgSrc and FontSrc.
+ // DefaultSrc directive serves as a fallback for the other CSP fetch directives.
+ // For more information about the DefaultSrc directive, see:
+ // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/default-src
+ // ScriptSrc directive specifies valid sources for JavaScript.
+ // For more information about the ScriptSrc directive, see:
+ // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/script-src
+ // StyleSrc directive specifies valid sources for stylesheets.
+ // For more information about the StyleSrc directive, see:
+ // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/style-src
+ // ImgSrc directive specifies a valid sources of images and favicons.
+ // For more information about the ImgSrc directive, see:
+ // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/img-src
+ // FontSrc directive specifies valid sources for fonts loaded using @font-face.
+ // For more information about the FontSrc directive, see:
+ // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/font-src
+ // +kubebuilder:validation:Required
+ Directive DirectiveType `json:"directive"`
+ // values defines an array of values to append to the console defaults for this directive.
+ // Each ConsolePlugin may define their own directives with their values. These will be set
+ // by the OpenShift web console's backend, as part of its Content-Security-Policy header.
+ // The array can contain at most 16 values. Each directive value must have a maximum length
+ // of 1024 characters and must not contain whitespace, commas (,), semicolons (;) or single
+ // quotes ('). The value '*' is not permitted.
+ // Each value in the array must be unique.
+ //
+ // +kubebuilder:validation:Required
+ // +kubebuilder:validation:MinItems=1
+ // +kubebuilder:validation:MaxItems=16
+ // +kubebuilder:validation:XValidation:rule="self.all(x, self.exists_one(y, x == y))",message="each CSP directive value must be unique"
+ // +listType=atomic
+ Values []CSPDirectiveValue `json:"values"`
}
// LoadType is an enumeration of i18n loading types
diff --git a/vendor/github.com/openshift/api/console/v1/zz_generated.deepcopy.go b/vendor/github.com/openshift/api/console/v1/zz_generated.deepcopy.go
index a268d697ac88e6eaa56be0fae953eccb496d6663..d4fefaa37c252678a7dc770eba3047d8f60e1d97 100644
--- a/vendor/github.com/openshift/api/console/v1/zz_generated.deepcopy.go
+++ b/vendor/github.com/openshift/api/console/v1/zz_generated.deepcopy.go
@@ -416,6 +416,27 @@ func (in *ConsolePluginBackend) DeepCopy() *ConsolePluginBackend {
return out
}
+// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
+func (in *ConsolePluginCSP) DeepCopyInto(out *ConsolePluginCSP) {
+ *out = *in
+ if in.Values != nil {
+ in, out := &in.Values, &out.Values
+ *out = make([]CSPDirectiveValue, len(*in))
+ copy(*out, *in)
+ }
+ return
+}
+
+// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ConsolePluginCSP.
+func (in *ConsolePluginCSP) DeepCopy() *ConsolePluginCSP {
+ if in == nil {
+ return nil
+ }
+ out := new(ConsolePluginCSP)
+ in.DeepCopyInto(out)
+ return out
+}
+
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *ConsolePluginI18n) DeepCopyInto(out *ConsolePluginI18n) {
*out = *in
@@ -547,6 +568,13 @@ func (in *ConsolePluginSpec) DeepCopyInto(out *ConsolePluginSpec) {
}
}
out.I18n = in.I18n
+ if in.ContentSecurityPolicy != nil {
+ in, out := &in.ContentSecurityPolicy, &out.ContentSecurityPolicy
+ *out = make([]ConsolePluginCSP, len(*in))
+ for i := range *in {
+ (*in)[i].DeepCopyInto(&(*out)[i])
+ }
+ }
return
}
@@ -648,7 +676,9 @@ func (in *ConsoleQuickStartSpec) DeepCopyInto(out *ConsoleQuickStartSpec) {
if in.AccessReviewResources != nil {
in, out := &in.AccessReviewResources, &out.AccessReviewResources
*out = make([]authorizationv1.ResourceAttributes, len(*in))
- copy(*out, *in)
+ for i := range *in {
+ (*in)[i].DeepCopyInto(&(*out)[i])
+ }
}
return
}
diff --git a/vendor/github.com/openshift/api/console/v1/zz_generated.featuregated-crd-manifests.yaml b/vendor/github.com/openshift/api/console/v1/zz_generated.featuregated-crd-manifests.yaml
index 98abc7147b9f444d3267f9e2107207fc4a6de05e..250f873a0924225d788dfa1e43b741018d836cc0 100644
--- a/vendor/github.com/openshift/api/console/v1/zz_generated.featuregated-crd-manifests.yaml
+++ b/vendor/github.com/openshift/api/console/v1/zz_generated.featuregated-crd-manifests.yaml
@@ -137,7 +137,8 @@ consoleplugins.console.openshift.io:
CRDName: consoleplugins.console.openshift.io
Capability: Console
Category: ""
- FeatureGates: []
+ FeatureGates:
+ - ConsolePluginContentSecurityPolicy
FilenameOperatorName: ""
FilenameOperatorOrdering: "90"
FilenameRunLevel: ""
diff --git a/vendor/github.com/openshift/api/console/v1/zz_generated.swagger_doc_generated.go b/vendor/github.com/openshift/api/console/v1/zz_generated.swagger_doc_generated.go
index c6f2070fa4a1e14f6a0fea35c5eaec8eb2feabc2..685cb7ea276b82d6d3eb1c9b5715d08fa6dc433d 100644
--- a/vendor/github.com/openshift/api/console/v1/zz_generated.swagger_doc_generated.go
+++ b/vendor/github.com/openshift/api/console/v1/zz_generated.swagger_doc_generated.go
@@ -187,6 +187,16 @@ func (ConsolePluginBackend) SwaggerDoc() map[string]string {
return map_ConsolePluginBackend
}
+var map_ConsolePluginCSP = map[string]string{
+ "": "ConsolePluginCSP holds configuration for a specific CSP directive",
+ "directive": "directive specifies which Content-Security-Policy directive to configure. Available directive types are DefaultSrc, ScriptSrc, StyleSrc, ImgSrc and FontSrc. DefaultSrc directive serves as a fallback for the other CSP fetch directives. For more information about the DefaultSrc directive, see: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/default-src ScriptSrc directive specifies valid sources for JavaScript. For more information about the ScriptSrc directive, see: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/script-src StyleSrc directive specifies valid sources for stylesheets. For more information about the StyleSrc directive, see: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/style-src ImgSrc directive specifies a valid sources of images and favicons. For more information about the ImgSrc directive, see: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/img-src FontSrc directive specifies valid sources for fonts loaded using @font-face. For more information about the FontSrc directive, see: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/font-src",
+ "values": "values defines an array of values to append to the console defaults for this directive. Each ConsolePlugin may define their own directives with their values. These will be set by the OpenShift web console's backend, as part of its Content-Security-Policy header. The array can contain at most 16 values. Each directive value must have a maximum length of 1024 characters and must not contain whitespace, commas (,), semicolons (;) or single quotes ('). The value '*' is not permitted. Each value in the array must be unique.",
+}
+
+func (ConsolePluginCSP) SwaggerDoc() map[string]string {
+ return map_ConsolePluginCSP
+}
+
var map_ConsolePluginI18n = map[string]string{
"": "ConsolePluginI18n holds information on localization resources that are served by the dynamic plugin.",
"loadType": "loadType indicates how the plugin's localization resource should be loaded. Valid values are Preload, Lazy and the empty string. When set to Preload, all localization resources are fetched when the plugin is loaded. When set to Lazy, localization resources are lazily loaded as and when they are required by the console. When omitted or set to the empty string, the behaviour is equivalent to Lazy type.",
@@ -251,11 +261,12 @@ func (ConsolePluginService) SwaggerDoc() map[string]string {
}
var map_ConsolePluginSpec = map[string]string{
- "": "ConsolePluginSpec is the desired plugin configuration.",
- "displayName": "displayName is the display name of the plugin. The dispalyName should be between 1 and 128 characters.",
- "backend": "backend holds the configuration of backend which is serving console's plugin .",
- "proxy": "proxy is a list of proxies that describe various service type to which the plugin needs to connect to.",
- "i18n": "i18n is the configuration of plugin's localization resources.",
+ "": "ConsolePluginSpec is the desired plugin configuration.",
+ "displayName": "displayName is the display name of the plugin. The dispalyName should be between 1 and 128 characters.",
+ "backend": "backend holds the configuration of backend which is serving console's plugin .",
+ "proxy": "proxy is a list of proxies that describe various service type to which the plugin needs to connect to.",
+ "i18n": "i18n is the configuration of plugin's localization resources.",
+ "contentSecurityPolicy": "contentSecurityPolicy is a list of Content-Security-Policy (CSP) directives for the plugin. Each directive specifies a list of values, appropriate for the given directive type, for example a list of remote endpoints for fetch directives such as ScriptSrc. Console web application uses CSP to detect and mitigate certain types of attacks, such as cross-site scripting (XSS) and data injection attacks. Dynamic plugins should specify this field if need to load assets from outside the cluster or if violation reports are observed. Dynamic plugins should always prefer loading their assets from within the cluster, either by vendoring them, or fetching from a cluster service. CSP violation reports can be viewed in the browser's console logs during development and testing of the plugin in the OpenShift web console. Available directive types are DefaultSrc, ScriptSrc, StyleSrc, ImgSrc and FontSrc. Each of the available directives may be defined only once in the list. The value 'self' is automatically included in all fetch directives by the OpenShift web console's backend. For more information about the CSP directives, see: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy\n\nThe OpenShift web console server aggregates the CSP directives and values across its own default values and all enabled ConsolePlugin CRs, merging them into a single policy string that is sent to the browser via `Content-Security-Policy` HTTP response header.\n\nExample:\n ConsolePlugin A directives:\n script-src: https://script1.com/, https://script2.com/\n font-src: https://font1.com/\n\n ConsolePlugin B directives:\n script-src: https://script2.com/, https://script3.com/\n font-src: https://font2.com/\n img-src: https://img1.com/\n\n Unified set of CSP directives, passed to the OpenShift web console server:\n script-src: https://script1.com/, https://script2.com/, https://script3.com/\n font-src: https://font1.com/, https://font2.com/\n img-src: https://img1.com/\n\n OpenShift web console server CSP response header:\n Content-Security-Policy: default-src 'self'; base-uri 'self'; script-src 'self' https://script1.com/ https://script2.com/ https://script3.com/; font-src 'self' https://font1.com/ https://font2.com/; img-src 'self' https://img1.com/; style-src 'self'; frame-src 'none'; object-src 'none'",
}
func (ConsolePluginSpec) SwaggerDoc() map[string]string {
diff --git a/vendor/github.com/openshift/api/envtest-releases.yaml b/vendor/github.com/openshift/api/envtest-releases.yaml
index fa789b18cea2791513e32bc9db2a4a75456543fa..5651bbcc9d4cf800baf38c79d00680079222a21c 100644
--- a/vendor/github.com/openshift/api/envtest-releases.yaml
+++ b/vendor/github.com/openshift/api/envtest-releases.yaml
@@ -12,3 +12,16 @@ releases:
envtest-v1.30.3-linux-arm64.tar.gz:
hash: deb395d5e9578a58786c42b4e7d878b4aef984ac2dce510031fbecf12092162a4aee1cde774f1527cfae90f6885382dc7b3d79ec379b7f4160c3a35fad7cbc3b
selfLink: https://storage.googleapis.com/openshift-kubebuilder-tools/envtest-v1.30.3-linux-arm64.tar.gz
+ v1.31.1:
+ envtest-v1.31.1-darwin-amd64.tar.gz:
+ hash: c884c6a9751f12f57ede0dc3d8dfffdb0f60f7111d6d01ca0693b66d663dfbd37c21ab6a9e571d1a6f649ed7db54b04b069ab0aff6366b2db2f5d3d8ba84a296
+ selfLink: https://storage.googleapis.com/openshift-kubebuilder-tools/envtest-v1.31.1-darwin-amd64.tar.gz
+ envtest-v1.31.1-darwin-arm64.tar.gz:
+ hash: c760be21c579a516cad8fbafd0f202229f5e074da1869958b84ae8dca295ffb33eb6fd4fd0b66349c31c4adff1561e7dd188137885e3661e34c0a14e12ada20e
+ selfLink: https://storage.googleapis.com/openshift-kubebuilder-tools/envtest-v1.31.1-darwin-arm64.tar.gz
+ envtest-v1.31.1-linux-amd64.tar.gz:
+ hash: a683fad736249b681d50c40715068ecb64f3ef22a85f29387eb61435c36dfe0cebf0bc7e109e237071cd856bc0e37d79a732309fd8d0b16fba6e019cf5c6e8b6
+ selfLink: https://storage.googleapis.com/openshift-kubebuilder-tools/envtest-v1.31.1-linux-amd64.tar.gz
+ envtest-v1.31.1-linux-arm64.tar.gz:
+ hash: 86fa42c6a3d92e438e35d6066587d0e4f36b910885e10520868959ece2fe740d99abc735f69d6ebe8920291f70d3819b169ad5ddd2db805f8f56a3b83eee3893
+ selfLink: https://storage.googleapis.com/openshift-kubebuilder-tools/envtest-v1.31.1-linux-arm64.tar.gz
diff --git a/vendor/github.com/openshift/api/features.md b/vendor/github.com/openshift/api/features.md
index e668fc88b3668396eded7d5cd001a8c1ea61237b..b534dce417b6b18d87475234f6200287f00c2133 100644
--- a/vendor/github.com/openshift/api/features.md
+++ b/vendor/github.com/openshift/api/features.md
@@ -7,30 +7,34 @@
| MachineAPIOperatorDisableMachineHealthCheckController| | | | | | |
| MultiArchInstallAzure| | | | | | |
| GatewayAPI| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | | |
+| AWSClusterHostedDNS| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
| AdditionalRoutingCapabilities| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
| AutomatedEtcdBackup| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
| BootcNodeManagement| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
| CSIDriverSharedResource| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
| ClusterMonitoringConfig| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
+| ConsolePluginContentSecurityPolicy| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
| DNSNameResolver| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
| DynamicResourceAllocation| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
| EtcdBackendQuota| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
| Example| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
| GCPClusterHostedDNS| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
| ImageStreamImportMode| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
+| IngressControllerDynamicConfigurationManager| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
| InsightsConfig| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
| InsightsConfigAPI| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
| InsightsOnDemandDataGather| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
| InsightsRuntimeExtractor| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
| MachineAPIProviderOpenStack| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
| MachineConfigNodes| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
-| ManagedBootImagesAWS| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
| MaxUnavailableStatefulSet| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
| MetricsCollectionProfiles| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
+| MinimumKubeletVersion| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
| MixedCPUsAllocation| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
| NetworkSegmentation| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
| NewOLM| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
| NodeSwap| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
+| NutanixMultiSubnets| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
| OVNObservability| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
| OnClusterBuild| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
| PersistentIPsForVirtualization| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
@@ -48,6 +52,7 @@
| UserNamespacesSupport| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
| VSphereMultiNetworks| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
| VSphereMultiVCenters| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
+| VolumeAttributesClass| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
| VolumeGroupSnapshot| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
| ExternalOIDC| <span style="background-color: #519450">Enabled</span> | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
| AWSEFSDriverVolumeMetrics| <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
@@ -64,7 +69,7 @@
| IngressControllerLBSubnetsAWS| <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
| KMSv1| <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
| ManagedBootImages| <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
-| MetricsServer| <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
+| ManagedBootImagesAWS| <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
| MultiArchInstallAWS| <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
| MultiArchInstallGCP| <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
| NetworkDiagnosticsConfig| <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> |
diff --git a/vendor/github.com/openshift/api/features/features.go b/vendor/github.com/openshift/api/features/features.go
index 7f49623954327e6af38f8bd35e305dcca81fda76..800a84650507f4892513413741317cef78a908c3 100644
--- a/vendor/github.com/openshift/api/features/features.go
+++ b/vendor/github.com/openshift/api/features/features.go
@@ -36,10 +36,19 @@ func AllFeatureSets() map[ClusterProfileName]map[configv1.FeatureSet]*FeatureGat
var (
allFeatureGates = map[ClusterProfileName]map[configv1.FeatureSet]*FeatureGateEnabledDisabled{}
+ FeatureGateConsolePluginCSP = newFeatureGate("ConsolePluginContentSecurityPolicy").
+ reportProblemsToJiraComponent("Management Console").
+ contactPerson("jhadvig").
+ productScope(ocpSpecific).
+ enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
+ enhancementPR("https://github.com/openshift/enhancements/pull/1706").
+ mustRegister()
+
FeatureGateServiceAccountTokenNodeBinding = newFeatureGate("ServiceAccountTokenNodeBinding").
reportProblemsToJiraComponent("apiserver-auth").
contactPerson("stlaz").
productScope(kubernetes).
+ enhancementPR("https://github.com/kubernetes/enhancements/issues/4193").
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -47,6 +56,7 @@ var (
reportProblemsToJiraComponent("kube-apiserver").
contactPerson("benluddy").
productScope(kubernetes).
+ enhancementPR("https://github.com/kubernetes/enhancements/issues/3488").
enableIn(configv1.Default, configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -54,6 +64,7 @@ var (
reportProblemsToJiraComponent("Routing").
contactPerson("miciah").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.DevPreviewNoUpgrade).
mustRegister()
@@ -61,6 +72,7 @@ var (
reportProblemsToJiraComponent("Networking / router").
contactPerson("miheer").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.Default, configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -68,6 +80,7 @@ var (
reportProblemsToJiraComponent("auth").
contactPerson("ibihim").
productScope(ocpSpecific).
+ enhancementPR("https://github.com/openshift/enhancements/pull/899").
enableIn(configv1.Default, configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -75,6 +88,7 @@ var (
reportProblemsToJiraComponent("builds").
contactPerson("adkaplan").
productScope(ocpSpecific).
+ enhancementPR("https://github.com/openshift/enhancements/pull/1056").
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -82,6 +96,7 @@ var (
reportProblemsToJiraComponent("builds").
contactPerson("adkaplan").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.Default, configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -89,6 +104,7 @@ var (
reportProblemsToJiraComponent("node").
contactPerson("ehashman").
productScope(kubernetes).
+ enhancementPR("https://github.com/kubernetes/enhancements/issues/2400").
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -96,6 +112,7 @@ var (
reportProblemsToJiraComponent("openstack").
contactPerson("egarcia").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -103,6 +120,7 @@ var (
reportProblemsToJiraComponent("insights").
contactPerson("tremes").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -110,6 +128,7 @@ var (
reportProblemsToJiraComponent("insights").
contactPerson("jmesnil").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -117,6 +136,7 @@ var (
reportProblemsToJiraComponent("scheduling").
contactPerson("jchaloup").
productScope(kubernetes).
+ enhancementPR("https://github.com/kubernetes/enhancements/issues/4381").
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -124,6 +144,7 @@ var (
reportProblemsToJiraComponent("cloud-credential-operator").
contactPerson("abutcher").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.Default, configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -131,6 +152,7 @@ var (
reportProblemsToJiraComponent("apps").
contactPerson("atiratree").
productScope(kubernetes).
+ enhancementPR("https://github.com/kubernetes/enhancements/issues/961").
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -138,12 +160,14 @@ var (
reportProblemsToJiraComponent("node").
contactPerson("sairameshv").
productScope(kubernetes).
+ enhancementPR("https://github.com/kubernetes/enhancements/issues/3386").
mustRegister()
FeatureGatePrivateHostedZoneAWS = newFeatureGate("PrivateHostedZoneAWS").
reportProblemsToJiraComponent("Routing").
contactPerson("miciah").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.Default, configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -151,6 +175,7 @@ var (
reportProblemsToJiraComponent("node").
contactPerson("sgrunert").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -158,6 +183,7 @@ var (
reportProblemsToJiraComponent("Installer").
contactPerson("bhb").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.Default, configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -165,6 +191,7 @@ var (
reportProblemsToJiraComponent("cloud-provider").
contactPerson("jspeed").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.Default, configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -172,6 +199,7 @@ var (
reportProblemsToJiraComponent("machine-config-operator/platform-baremetal").
contactPerson("mkowalsk").
productScope(kubernetes).
+ enhancementPR("https://github.com/kubernetes/enhancements/issues/3705").
enableIn(configv1.Default, configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -179,6 +207,7 @@ var (
reportProblemsToJiraComponent("splat").
contactPerson("vr4manta").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -186,6 +215,7 @@ var (
reportProblemsToJiraComponent("splat").
contactPerson("rvanderp3").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.Default, configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -193,6 +223,7 @@ var (
reportProblemsToJiraComponent("router").
contactPerson("thejasn").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -200,6 +231,7 @@ var (
reportProblemsToJiraComponent("Networking/ovn-kubernetes").
contactPerson("tssurya").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.Default, configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -207,6 +239,7 @@ var (
reportProblemsToJiraComponent("Networking/ovn-kubernetes").
contactPerson("tssurya").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -214,6 +247,7 @@ var (
reportProblemsToJiraComponent("Networking/cluster-network-operator").
contactPerson("jcaamano").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -221,6 +255,7 @@ var (
reportProblemsToJiraComponent("Networking/ovn-kubernetes").
contactPerson("jcaamano").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -228,6 +263,7 @@ var (
reportProblemsToJiraComponent("Networking/ovn-kubernetes").
contactPerson("pliu").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.Default, configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -235,6 +271,7 @@ var (
reportProblemsToJiraComponent("Networking/cluster-network-operator").
contactPerson("kyrtapz").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.Default, configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -242,6 +279,7 @@ var (
reportProblemsToJiraComponent("Networking").
contactPerson("npinaeva").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -249,6 +287,7 @@ var (
reportProblemsToJiraComponent("etcd").
contactPerson("hasbro17").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.Default, configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -256,6 +295,7 @@ var (
reportProblemsToJiraComponent("etcd").
contactPerson("hasbro17").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -263,6 +303,7 @@ var (
reportProblemsToJiraComponent("etcd").
contactPerson("hasbro17").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -270,12 +311,14 @@ var (
reportProblemsToJiraComponent("ecoproject").
contactPerson("msluiter").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
mustRegister()
FeatureGateDNSNameResolver = newFeatureGate("DNSNameResolver").
reportProblemsToJiraComponent("dns").
contactPerson("miciah").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -283,6 +326,7 @@ var (
reportProblemsToJiraComponent("splat").
contactPerson("rvanderp3").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.Default, configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -290,6 +334,7 @@ var (
reportProblemsToJiraComponent("MachineConfigOperator").
contactPerson("cdoern").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -297,19 +342,22 @@ var (
reportProblemsToJiraComponent("Installer").
contactPerson("vincepri").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
mustRegister()
- FeatureGateMetricsServer = newFeatureGate("MetricsServer").
- reportProblemsToJiraComponent("Monitoring").
- contactPerson("slashpai").
+ FeatureGateGCPClusterHostedDNS = newFeatureGate("GCPClusterHostedDNS").
+ reportProblemsToJiraComponent("Installer").
+ contactPerson("barbacbd").
productScope(ocpSpecific).
- enableIn(configv1.Default, configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
+ enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
- FeatureGateGCPClusterHostedDNS = newFeatureGate("GCPClusterHostedDNS").
+ FeatureGateAWSClusterHostedDNS = newFeatureGate("AWSClusterHostedDNS").
reportProblemsToJiraComponent("Installer").
contactPerson("barbacbd").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -317,6 +365,7 @@ var (
reportProblemsToJiraComponent("NodeTuningOperator").
contactPerson("titzhak").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -324,6 +373,7 @@ var (
reportProblemsToJiraComponent("MachineConfigOperator").
contactPerson("djoshy").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.Default, configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -331,13 +381,15 @@ var (
reportProblemsToJiraComponent("MachineConfigOperator").
contactPerson("djoshy").
productScope(ocpSpecific).
- enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
+ enableIn(configv1.Default, configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
FeatureGateDisableKubeletCloudCredentialProviders = newFeatureGate("DisableKubeletCloudCredentialProviders").
reportProblemsToJiraComponent("cloud-provider").
contactPerson("jspeed").
productScope(kubernetes).
+ enhancementPR("https://github.com/kubernetes/enhancements/issues/2395").
enableIn(configv1.Default, configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -345,6 +397,7 @@ var (
reportProblemsToJiraComponent("MachineConfigOperator").
contactPerson("dkhater").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -352,6 +405,7 @@ var (
reportProblemsToJiraComponent("MachineConfigOperator").
contactPerson("inesqyx").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -359,6 +413,7 @@ var (
reportProblemsToJiraComponent("Cluster Version Operator").
contactPerson("lmohanty").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -366,6 +421,7 @@ var (
reportProblemsToJiraComponent("kube-apiserver").
contactPerson("dgrisonnet").
productScope(kubernetes).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.Default, configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -373,6 +429,7 @@ var (
reportProblemsToJiraComponent("MachineConfigOperator").
contactPerson("jhernand").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -380,6 +437,7 @@ var (
reportProblemsToJiraComponent("Cluster Version Operator").
contactPerson("pmuller").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -387,13 +445,23 @@ var (
reportProblemsToJiraComponent("kube-apiserver").
contactPerson("akashem").
productScope(kubernetes).
+ enhancementPR("https://github.com/kubernetes/enhancements/issues/4006").
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
+ FeatureGateVolumeAttributesClass = newFeatureGate("VolumeAttributesClass").
+ reportProblemsToJiraComponent("Storage / Kubernetes External Components").
+ contactPerson("dfajmon").
+ productScope(kubernetes).
+ enhancementPR("https://github.com/kubernetes/enhancements/issues/3751").
+ enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
+ mustRegister()
+
FeatureGateVolumeGroupSnapshot = newFeatureGate("VolumeGroupSnapshot").
reportProblemsToJiraComponent("Storage / Kubernetes External Components").
contactPerson("fbertina").
productScope(kubernetes).
+ enhancementPR("https://github.com/kubernetes/enhancements/issues/3476").
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -401,6 +469,7 @@ var (
reportProblemsToJiraComponent("authentication").
contactPerson("liouk").
productScope(ocpSpecific).
+ enhancementPR("https://github.com/openshift/enhancements/pull/1596").
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
enableForClusterProfile(Hypershift, configv1.Default, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -409,6 +478,7 @@ var (
reportProblemsToJiraComponent("cluster-config").
contactPerson("deads").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -416,6 +486,7 @@ var (
reportProblemsToJiraComponent("olm").
contactPerson("joe").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -423,6 +494,7 @@ var (
reportProblemsToJiraComponent("olm").
contactPerson("joe").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -430,6 +502,7 @@ var (
reportProblemsToJiraComponent("insights").
contactPerson("tremes").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -437,6 +510,7 @@ var (
reportProblemsToJiraComponent("metal").
contactPerson("EmilienM").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.Default, configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -444,6 +518,7 @@ var (
reportProblemsToJiraComponent("insights").
contactPerson("tremes").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -451,6 +526,7 @@ var (
reportProblemsToJiraComponent("MachineConfigOperator").
contactPerson("jerzhang").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.Default, configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -458,6 +534,7 @@ var (
reportProblemsToJiraComponent("Monitoring").
contactPerson("rexagod").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -465,6 +542,7 @@ var (
reportProblemsToJiraComponent("Storage / Kubernetes External Components").
contactPerson("rbednar").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.Default, configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -472,12 +550,14 @@ var (
reportProblemsToJiraComponent("Installer").
contactPerson("cjschaef").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
mustRegister()
FeatureGateChunkSizeMiB = newFeatureGate("ChunkSizeMiB").
reportProblemsToJiraComponent("Image Registry").
contactPerson("flavianmissi").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.Default, configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -485,12 +565,14 @@ var (
reportProblemsToJiraComponent("OCPCLOUD").
contactPerson("jspeed").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
mustRegister()
FeatureGatePersistentIPsForVirtualization = newFeatureGate("PersistentIPsForVirtualization").
reportProblemsToJiraComponent("CNV Network").
contactPerson("mduarted").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -498,6 +580,7 @@ var (
reportProblemsToJiraComponent("Monitoring").
contactPerson("marioferh").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -505,6 +588,7 @@ var (
reportProblemsToJiraComponent("Installer").
contactPerson("r4f4").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.Default, configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -512,12 +596,14 @@ var (
reportProblemsToJiraComponent("Installer").
contactPerson("r4f4").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
mustRegister()
FeatureGateMultiArchInstallGCP = newFeatureGate("MultiArchInstallGCP").
reportProblemsToJiraComponent("Installer").
contactPerson("r4f4").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.Default, configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -525,6 +611,7 @@ var (
reportProblemsToJiraComponent("Routing").
contactPerson("miciah").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.Default, configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -532,6 +619,7 @@ var (
reportProblemsToJiraComponent("Storage / Kubernetes External Components").
contactPerson("fbertina").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.Default, configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -539,6 +627,7 @@ var (
reportProblemsToJiraComponent("Multi-Arch").
contactPerson("psundara").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -546,6 +635,7 @@ var (
reportProblemsToJiraComponent("Node").
contactPerson("haircommander").
productScope(kubernetes).
+ enhancementPR("https://github.com/kubernetes/enhancements/issues/127").
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -553,6 +643,7 @@ var (
reportProblemsToJiraComponent("Node").
contactPerson("haircommander").
productScope(kubernetes).
+ enhancementPR("https://github.com/kubernetes/enhancements/issues/127").
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -560,6 +651,7 @@ var (
reportProblemsToJiraComponent("Node").
contactPerson("haircommander").
productScope(kubernetes).
+ enhancementPR("https://github.com/kubernetes/enhancements/issues/4265").
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
@@ -567,6 +659,31 @@ var (
reportProblemsToJiraComponent("SPLAT").
contactPerson("rvanderp").
productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
+ enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
+ mustRegister()
+
+ FeatureGateIngressControllerDynamicConfigurationManager = newFeatureGate("IngressControllerDynamicConfigurationManager").
+ reportProblemsToJiraComponent("Networking/router").
+ contactPerson("miciah").
+ productScope(ocpSpecific).
+ enhancementPR(legacyFeatureGateWithoutEnhancement).
+ enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
+ mustRegister()
+
+ FeatureGateMinimumKubeletVersion = newFeatureGate("MinimumKubeletVersion").
+ reportProblemsToJiraComponent("Node").
+ contactPerson("haircommander").
+ productScope(ocpSpecific).
+ enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
+ enhancementPR("https://github.com/openshift/enhancements/pull/1697").
+ mustRegister()
+
+ FeatureGateNutanixMultiSubnets = newFeatureGate("NutanixMultiSubnets").
+ reportProblemsToJiraComponent("Cloud Compute / Nutanix Provider").
+ contactPerson("yanhli").
+ productScope(ocpSpecific).
+ enhancementPR("https://github.com/openshift/enhancements/pull/1711").
enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
mustRegister()
)
diff --git a/vendor/github.com/openshift/api/features/legacyfeaturegates.go b/vendor/github.com/openshift/api/features/legacyfeaturegates.go
new file mode 100644
index 0000000000000000000000000000000000000000..06e1600e0d912ae58952e2e640a9f1e5b780c593
--- /dev/null
+++ b/vendor/github.com/openshift/api/features/legacyfeaturegates.go
@@ -0,0 +1,129 @@
+package features
+
+import "k8s.io/apimachinery/pkg/util/sets"
+
+var legacyFeatureGates = sets.New(
+ "AWSClusterHostedDNS",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "AWSEFSDriverVolumeMetrics",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "AdditionalRoutingCapabilities",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "AdminNetworkPolicy",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "AlibabaPlatform",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "AutomatedEtcdBackup",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "AzureWorkloadIdentity",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "BareMetalLoadBalancer",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "BootcNodeManagement",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "BuildCSIVolumes",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "ChunkSizeMiB",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "ClusterAPIInstall",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "ClusterAPIInstallIBMCloud",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "ClusterMonitoringConfig",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "DNSNameResolver",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "EtcdBackendQuota",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "Example",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "GCPClusterHostedDNS",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "GCPLabelsTags",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "GatewayAPI",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "HardwareSpeed",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "ImageStreamImportMode",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "IngressControllerDynamicConfigurationManager",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "IngressControllerLBSubnetsAWS",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "InsightsConfig",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "InsightsConfigAPI",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "InsightsOnDemandDataGather",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "InsightsRuntimeExtractor",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "KMSv1",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "MachineAPIMigration",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "MachineAPIOperatorDisableMachineHealthCheckController",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "MachineAPIProviderOpenStack",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "MachineConfigNodes",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "ManagedBootImages",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "ManagedBootImagesAWS",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "MetricsCollectionProfiles",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "MixedCPUsAllocation",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "MultiArchInstallAWS",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "MultiArchInstallAzure",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "MultiArchInstallGCP",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "NetworkDiagnosticsConfig",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "NetworkLiveMigration",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "NetworkSegmentation",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "NewOLM",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "NodeDisruptionPolicy",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "OVNObservability",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "OnClusterBuild",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "PersistentIPsForVirtualization",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "PinnedImages",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "PlatformOperators",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "PrivateHostedZoneAWS",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "RouteAdvertisements",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "RouteExternalCertificate",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "SetEIPForNLBIngressController",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "SignatureStores",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "SigstoreImageVerification",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "UpgradeStatus",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "VSphereControlPlaneMachineSet",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "VSphereDriverConfiguration",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "VSphereMultiNetworks",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "VSphereMultiVCenters",
+ // never add to this list, if you think you have an exception ask @deads2k
+ "VSphereStaticIPs",
+)
diff --git a/vendor/github.com/openshift/api/features/util.go b/vendor/github.com/openshift/api/features/util.go
index d8d8e94a0e9e1a169b9e8de2e649fa8e4485805e..59bb7bff4078ab169e81ca4f7251ac7260763099 100644
--- a/vendor/github.com/openshift/api/features/util.go
+++ b/vendor/github.com/openshift/api/features/util.go
@@ -3,6 +3,8 @@ package features
import (
"fmt"
configv1 "github.com/openshift/api/config/v1"
+ "net/url"
+ "strings"
)
// FeatureGateDescription is a golang-only interface used to contains details for a feature gate.
@@ -18,6 +20,8 @@ type FeatureGateDescription struct {
ResponsiblePerson string
// OwningProduct is the product that owns the lifecycle of the gate.
OwningProduct OwningProduct
+ // EnhancementPR is the PR for the enhancement.
+ EnhancementPR string
}
type FeatureGateEnabledDisabled struct {
@@ -45,10 +49,15 @@ type featureGateBuilder struct {
owningJiraComponent string
responsiblePerson string
owningProduct OwningProduct
+ enhancementPRURL string
statusByClusterProfileByFeatureSet map[ClusterProfileName]map[configv1.FeatureSet]bool
}
+const (
+ legacyFeatureGateWithoutEnhancement = "FeatureGate predates 4.18"
+)
+
// newFeatureGate featuregate are disabled in every FeatureSet and selectively enabled
func newFeatureGate(name string) *featureGateBuilder {
b := &featureGateBuilder{
@@ -80,6 +89,11 @@ func (b *featureGateBuilder) productScope(owningProduct OwningProduct) *featureG
return b
}
+func (b *featureGateBuilder) enhancementPR(url string) *featureGateBuilder {
+ b.enhancementPRURL = url
+ return b
+}
+
func (b *featureGateBuilder) enableIn(featureSets ...configv1.FeatureSet) *featureGateBuilder {
for clusterProfile := range b.statusByClusterProfileByFeatureSet {
for _, featureSet := range featureSets {
@@ -109,6 +123,22 @@ func (b *featureGateBuilder) register() (configv1.FeatureGateName, error) {
if len(b.owningProduct) == 0 {
return "", fmt.Errorf("missing owningProduct")
}
+ _, enhancementPRErr := url.Parse(b.enhancementPRURL)
+ switch {
+ case b.enhancementPRURL == legacyFeatureGateWithoutEnhancement:
+ if !legacyFeatureGates.Has(b.name) {
+ return "", fmt.Errorf("FeatureGate/%s is a new feature gate, not an existing one. It must have an enhancementPR with GA Graduation Criteria like https://github.com/openshift/enhancements/pull/#### or https://github.com/kubernetes/enhancements/issues/####", b.name)
+ }
+
+ case len(b.enhancementPRURL) == 0:
+ return "", fmt.Errorf("FeatureGate/%s is missing an enhancementPR with GA Graduation Criteria like https://github.com/openshift/enhancements/pull/#### or https://github.com/kubernetes/enhancements/issues/####", b.name)
+
+ case !strings.HasPrefix(b.enhancementPRURL, "https://github.com/openshift/enhancements/pull/") && !strings.HasPrefix(b.enhancementPRURL, "https://github.com/kubernetes/enhancements/issues/"):
+ return "", fmt.Errorf("FeatureGate/%s enhancementPR format is incorrect; must be like https://github.com/openshift/enhancements/pull/#### or https://github.com/kubernetes/enhancements/issues/####", b.name)
+
+ case enhancementPRErr != nil:
+ return "", fmt.Errorf("FeatureGate/%s is enhancementPR is invalid: %w", b.name, enhancementPRErr)
+ }
featureGateName := configv1.FeatureGateName(b.name)
description := FeatureGateDescription{
@@ -118,6 +148,7 @@ func (b *featureGateBuilder) register() (configv1.FeatureGateName, error) {
OwningJiraComponent: b.owningJiraComponent,
ResponsiblePerson: b.responsiblePerson,
OwningProduct: b.owningProduct,
+ EnhancementPR: b.enhancementPRURL,
}
// statusByClusterProfileByFeatureSet is initialized by constructor to be false for every combination
diff --git a/vendor/github.com/openshift/api/image/v1/generated.proto b/vendor/github.com/openshift/api/image/v1/generated.proto
index 0b7ae71822b5588a8855b8e5fcef5992e104aee5..6b5f24cb21acd2e29dd58972017048392dc14311 100644
--- a/vendor/github.com/openshift/api/image/v1/generated.proto
+++ b/vendor/github.com/openshift/api/image/v1/generated.proto
@@ -45,7 +45,7 @@ message DockerImageReference {
message Image {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// DockerImageReference is the string that can be used to pull this image.
optional string dockerImageReference = 2;
@@ -53,7 +53,7 @@ message Image {
// DockerImageMetadata contains metadata about this image
// +patchStrategy=replace
// +kubebuilder:pruning:PreserveUnknownFields
- optional k8s.io.apimachinery.pkg.runtime.RawExtension dockerImageMetadata = 3;
+ optional .k8s.io.apimachinery.pkg.runtime.RawExtension dockerImageMetadata = 3;
// DockerImageMetadataVersion conveys the version of the object, which if empty defaults to "1.0"
optional string dockerImageMetadataVersion = 4;
@@ -115,10 +115,10 @@ message ImageBlobReferences {
// ImageImportSpec describes a request to import a specific image.
message ImageImportSpec {
// From is the source of an image to import; only kind DockerImage is allowed
- optional k8s.io.api.core.v1.ObjectReference from = 1;
+ optional .k8s.io.api.core.v1.ObjectReference from = 1;
// To is a tag in the current image stream to assign the imported image to, if name is not specified the default tag from from.name will be used
- optional k8s.io.api.core.v1.LocalObjectReference to = 2;
+ optional .k8s.io.api.core.v1.LocalObjectReference to = 2;
// ImportPolicy is the policy controlling how the image is imported
optional TagImportPolicy importPolicy = 3;
@@ -133,7 +133,7 @@ message ImageImportSpec {
// ImageImportStatus describes the result of an image import.
message ImageImportStatus {
// Status is the status of the image import, including errors encountered while retrieving the image
- optional k8s.io.apimachinery.pkg.apis.meta.v1.Status status = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.Status status = 1;
// Image is the metadata of that image, if the image was located
optional Image image = 2;
@@ -174,7 +174,7 @@ message ImageLayerData {
message ImageList {
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
// Items is a list of images
repeated Image items = 2;
@@ -226,7 +226,7 @@ message ImageManifest {
message ImageSignature {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// Required: Describes a type of stored blob.
optional string type = 2;
@@ -247,7 +247,7 @@ message ImageSignature {
map<string, string> signedClaims = 6;
// If specified, it is the time of signature's creation.
- optional k8s.io.apimachinery.pkg.apis.meta.v1.Time created = 7;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.Time created = 7;
// If specified, it holds information about an issuer of signing certificate or key (a person or entity
// who signed the signing certificate or key).
@@ -278,7 +278,7 @@ message ImageSignature {
message ImageStream {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// Spec describes the desired state of this stream
// +optional
@@ -307,7 +307,7 @@ message ImageStream {
message ImageStreamImage {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// Image associated with the ImageStream and image name.
optional Image image = 2;
@@ -327,7 +327,7 @@ message ImageStreamImage {
message ImageStreamImport {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// Spec is a description of the images that the user wishes to import
optional ImageStreamImportSpec spec = 2;
@@ -370,7 +370,7 @@ message ImageStreamImportStatus {
message ImageStreamLayers {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// blobs is a map of blob name to metadata about the blob.
map<string, ImageLayerData> blobs = 2;
@@ -387,7 +387,7 @@ message ImageStreamLayers {
message ImageStreamList {
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
// Items is a list of imageStreams
repeated ImageStream items = 2;
@@ -407,7 +407,7 @@ message ImageStreamList {
message ImageStreamMapping {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// Image is a container image.
optional Image image = 2;
@@ -464,7 +464,7 @@ message ImageStreamStatus {
message ImageStreamTag {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// tag is the spec tag associated with this image stream tag, and it may be null
// if only pushes have occurred to this image stream.
@@ -494,7 +494,7 @@ message ImageStreamTag {
message ImageStreamTagList {
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
// Items is the list of image stream tags
repeated ImageStreamTag items = 2;
@@ -514,7 +514,7 @@ message ImageStreamTagList {
message ImageTag {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// spec is the spec tag associated with this image stream tag, and it may be null
// if only pushes have occurred to this image stream.
@@ -541,7 +541,7 @@ message ImageTag {
message ImageTagList {
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
// Items is the list of image stream tags
repeated ImageTag items = 2;
@@ -562,7 +562,7 @@ message NamedTagEventList {
// RepositoryImportSpec describes a request to import images from a container image repository.
message RepositoryImportSpec {
// From is the source for the image repository to import; only kind DockerImage and a name of a container image repository is allowed
- optional k8s.io.api.core.v1.ObjectReference from = 1;
+ optional .k8s.io.api.core.v1.ObjectReference from = 1;
// ImportPolicy is the policy controlling how the image is imported
optional TagImportPolicy importPolicy = 2;
@@ -577,7 +577,7 @@ message RepositoryImportSpec {
// RepositoryImportStatus describes the result of an image repository import
message RepositoryImportStatus {
// Status reflects whether any failure occurred during import
- optional k8s.io.apimachinery.pkg.apis.meta.v1.Status status = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.Status status = 1;
// Images is a list of images successfully retrieved by the import of the repository.
repeated ImageImportStatus images = 2;
@@ -593,11 +593,11 @@ message SecretList {
// Standard list metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
// +optional
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
// Items is a list of secret objects.
// More info: https://kubernetes.io/docs/concepts/configuration/secret
- repeated k8s.io.api.core.v1.Secret items = 2;
+ repeated .k8s.io.api.core.v1.Secret items = 2;
}
// SignatureCondition describes an image signature condition of particular kind at particular probe time.
@@ -609,10 +609,10 @@ message SignatureCondition {
optional string status = 2;
// Last time the condition was checked.
- optional k8s.io.apimachinery.pkg.apis.meta.v1.Time lastProbeTime = 3;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.Time lastProbeTime = 3;
// Last time the condition transit from one status to another.
- optional k8s.io.apimachinery.pkg.apis.meta.v1.Time lastTransitionTime = 4;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.Time lastTransitionTime = 4;
// (brief) reason for the condition's last transition.
optional string reason = 5;
@@ -649,7 +649,7 @@ message SignatureSubject {
// TagEvent is used by ImageStreamStatus to keep a historical record of images associated with a tag.
message TagEvent {
// Created holds the time the TagEvent was created
- optional k8s.io.apimachinery.pkg.apis.meta.v1.Time created = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.Time created = 1;
// DockerImageReference is the string that can be used to pull this image
optional string dockerImageReference = 2;
@@ -670,7 +670,7 @@ message TagEventCondition {
optional string status = 2;
// LastTransitionTIme is the time the condition transitioned from one status to another.
- optional k8s.io.apimachinery.pkg.apis.meta.v1.Time lastTransitionTime = 3;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.Time lastTransitionTime = 3;
// Reason is a brief machine readable explanation for the condition's last transition.
optional string reason = 4;
@@ -706,7 +706,7 @@ message TagReference {
// Optional; if specified, a reference to another image that this tag should point to. Valid values
// are ImageStreamTag, ImageStreamImage, and DockerImage. ImageStreamTag references
// can only reference a tag within this same ImageStream.
- optional k8s.io.api.core.v1.ObjectReference from = 3;
+ optional .k8s.io.api.core.v1.ObjectReference from = 3;
// Reference states if the tag will be imported. Default value is false, which means the tag will
// be imported.
diff --git a/vendor/github.com/openshift/api/kubecontrolplane/v1/types.go b/vendor/github.com/openshift/api/kubecontrolplane/v1/types.go
index b9cdcc213b849d6c6ee4cfb91edf8ad3335ca4f8..6d29f42e3fcd19e0c988844a09479dc7420577e3 100644
--- a/vendor/github.com/openshift/api/kubecontrolplane/v1/types.go
+++ b/vendor/github.com/openshift/api/kubecontrolplane/v1/types.go
@@ -62,6 +62,25 @@ type KubeAPIServerConfig struct {
// TODO this needs to be removed.
APIServerArguments map[string]Arguments `json:"apiServerArguments"`
+
+ // minimumKubeletVersion is the lowest version of a kubelet that can join the cluster.
+ // Specifically, the apiserver will deny most authorization requests of kubelets that are older
+ // than the specified version, only allowing the kubelet to get and update its node object, and perform
+ // subjectaccessreviews.
+ // This means any kubelet that attempts to join the cluster will not be able to run any assigned workloads,
+ // and will eventually be marked as not ready.
+ // Its max length is 8, so maximum version allowed is either "9.999.99" or "99.99.99".
+ // Since the kubelet reports the version of the kubernetes release, not Openshift, this field references
+ // the underlying kubernetes version this version of Openshift is based off of.
+ // In other words: if an admin wishes to ensure no nodes run an older version than Openshift 4.17, then
+ // they should set the minimumKubeletVersion to 1.30.0.
+ // When comparing versions, the kubelet's version is stripped of any contents outside of major.minor.patch version.
+ // Thus, a kubelet with version "1.0.0-ec.0" will be compatible with minimumKubeletVersion "1.0.0" or earlier.
+ // +kubebuilder:validation:XValidation:rule="self == \"\" || self.matches('^[0-9]*.[0-9]*.[0-9]*$')",message="minmumKubeletVersion must be in a semver compatible format of x.y.z, or empty"
+ // +kubebuilder:validation:MaxLength:=8
+ // +openshift:enable:FeatureGate=MinimumKubeletVersion
+ // +optional
+ MinimumKubeletVersion string `json:"minimumKubeletVersion"`
}
// Arguments masks the value so protobuf can generate
diff --git a/vendor/github.com/openshift/api/kubecontrolplane/v1/zz_generated.swagger_doc_generated.go b/vendor/github.com/openshift/api/kubecontrolplane/v1/zz_generated.swagger_doc_generated.go
index 906bb271b00b123aab5cedc94af80c6af813016e..5ecdd05839262026ce5f5b810ca276f5295d6c0b 100644
--- a/vendor/github.com/openshift/api/kubecontrolplane/v1/zz_generated.swagger_doc_generated.go
+++ b/vendor/github.com/openshift/api/kubecontrolplane/v1/zz_generated.swagger_doc_generated.go
@@ -33,6 +33,7 @@ var map_KubeAPIServerConfig = map[string]string{
"projectConfig": "projectConfig feeds an admission plugin",
"serviceAccountPublicKeyFiles": "serviceAccountPublicKeyFiles is a list of files, each containing a PEM-encoded public RSA key. (If any file contains a private key, the public portion of the key is used) The list of public keys is used to verify presented service account tokens. Each key is tried in order until the list is exhausted or verification succeeds. If no keys are specified, no service account authentication will be available.",
"oauthConfig": "oauthConfig, if present start the /oauth endpoint in this process",
+ "minimumKubeletVersion": "minimumKubeletVersion is the lowest version of a kubelet that can join the cluster. Specifically, the apiserver will deny most authorization requests of kubelets that are older than the specified version, only allowing the kubelet to get and update its node object, and perform subjectaccessreviews. This means any kubelet that attempts to join the cluster will not be able to run any assigned workloads, and will eventually be marked as not ready. Its max length is 8, so maximum version allowed is either \"9.999.99\" or \"99.99.99\". Since the kubelet reports the version of the kubernetes release, not Openshift, this field references the underlying kubernetes version this version of Openshift is based off of. In other words: if an admin wishes to ensure no nodes run an older version than Openshift 4.17, then they should set the minimumKubeletVersion to 1.30.0. When comparing versions, the kubelet's version is stripped of any contents outside of major.minor.patch version. Thus, a kubelet with version \"1.0.0-ec.0\" will be compatible with minimumKubeletVersion \"1.0.0\" or earlier.",
}
func (KubeAPIServerConfig) SwaggerDoc() map[string]string {
diff --git a/vendor/github.com/openshift/api/machine/v1beta1/types_machine.go b/vendor/github.com/openshift/api/machine/v1beta1/types_machine.go
index 066717fa6af7e616e2b4375c9518544060d16119..c8fcb192bd150021c7ba6fed3cc58bda2cb782be 100644
--- a/vendor/github.com/openshift/api/machine/v1beta1/types_machine.go
+++ b/vendor/github.com/openshift/api/machine/v1beta1/types_machine.go
@@ -267,8 +267,8 @@ type MachineSpec struct {
// Currently the authoritative API determines which controller will manage the resource, this will change in a future release.
// To ensure the change has been accepted, please verify that the `status.authoritativeAPI` field has been updated to the desired value and that the `Synchronized` condition is present and set to `True`.
// +kubebuilder:validation:Enum=MachineAPI;ClusterAPI
- // +kubebuilder:validation:Default:=MachineAPI
- // +default:=MachineAPI
+ // +kubebuilder:validation:Default=MachineAPI
+ // +default="MachineAPI"
// +openshift:enable:FeatureGate=MachineAPIMigration
// +optional
AuthoritativeAPI MachineAuthority `json:"authoritativeAPI,omitempty"`
@@ -299,8 +299,8 @@ type LifecycleHook struct {
// it may be namespaced, eg. foo.example.com/CamelCase.
// Names must be unique and should only be managed by a single entity.
// +kubebuilder:validation:Pattern=`^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$`
- // +kubebuilder:validation:MinLength:=3
- // +kubebuilder:validation:MaxLength:=256
+ // +kubebuilder:validation:MinLength=3
+ // +kubebuilder:validation:MaxLength=256
// +kubebuilder:validation:Required
Name string `json:"name"`
@@ -309,8 +309,8 @@ type LifecycleHook struct {
// who/what is responsible for blocking the lifecycle.
// This could be the name of a controller (e.g. clusteroperator/etcd)
// or an administrator managing the hook.
- // +kubebuilder:validation:MinLength:=3
- // +kubebuilder:validation:MaxLength:=512
+ // +kubebuilder:validation:MinLength=3
+ // +kubebuilder:validation:MaxLength=512
// +kubebuilder:validation:Required
Owner string `json:"owner"`
}
diff --git a/vendor/github.com/openshift/api/machine/v1beta1/types_machineset.go b/vendor/github.com/openshift/api/machine/v1beta1/types_machineset.go
index 8e7810deb074911399719ba2a6e2a94c4041a927..a14d50eb784f2bb1a95c3485798f76540ac430c4 100644
--- a/vendor/github.com/openshift/api/machine/v1beta1/types_machineset.go
+++ b/vendor/github.com/openshift/api/machine/v1beta1/types_machineset.go
@@ -69,8 +69,8 @@ type MachineSetSpec struct {
// Currently the authoritative API determines which controller will manage the resource, this will change in a future release.
// To ensure the change has been accepted, please verify that the `status.authoritativeAPI` field has been updated to the desired value and that the `Synchronized` condition is present and set to `True`.
// +kubebuilder:validation:Enum=MachineAPI;ClusterAPI
- // +kubebuilder:validation:Default:=MachineAPI
- // +default:=MachineAPI
+ // +kubebuilder:validation:Default=MachineAPI
+ // +default="MachineAPI"
// +openshift:enable:FeatureGate=MachineAPIMigration
// +optional
AuthoritativeAPI MachineAuthority `json:"authoritativeAPI,omitempty"`
diff --git a/vendor/github.com/openshift/api/machine/v1beta1/types_vsphereprovider.go b/vendor/github.com/openshift/api/machine/v1beta1/types_vsphereprovider.go
index b726931982985dad2bf102a9d795917500aa7dee..f458cbf6eff83975ee7e546f7bf8c0b3a187ce8e 100644
--- a/vendor/github.com/openshift/api/machine/v1beta1/types_vsphereprovider.go
+++ b/vendor/github.com/openshift/api/machine/v1beta1/types_vsphereprovider.go
@@ -53,8 +53,8 @@ type VSphereMachineProviderSpec struct {
DiskGiB int32 `json:"diskGiB,omitempty"`
// tagIDs is an optional set of tags to add to an instance. Specified tagIDs
// must use URN-notation instead of display names. A maximum of 10 tag IDs may be specified.
- // +kubebuilder:validation:Pattern:="^(urn):(vmomi):(InventoryServiceTag):([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}):([^:]+)$"
- // +kubebuilder:example=urn:vmomi:InventoryServiceTag:5736bf56-49f5-4667-b38c-b97e09dc9578:GLOBAL
+ // +kubebuilder:validation:Pattern="^(urn):(vmomi):(InventoryServiceTag):([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}):([^:]+)$"
+ // +kubebuilder:example="urn:vmomi:InventoryServiceTag:5736bf56-49f5-4667-b38c-b97e09dc9578:GLOBAL"
// +optional
TagIDs []string `json:"tagIDs,omitempty"`
// Snapshot is the name of the snapshot from which the VM was cloned
@@ -99,19 +99,19 @@ type AddressesFromPool struct {
// group of the IP address pool type known to an external IPAM controller.
// This should be a fully qualified domain name, for example, externalipam.controller.io.
// +kubebuilder:example=externalipam.controller.io
- // +kubebuilder:validation:Pattern:="^$|^[a-z0-9]([-a-z0-9]*[a-z0-9])?(.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$"
+ // +kubebuilder:validation:Pattern="^$|^[a-z0-9]([-a-z0-9]*[a-z0-9])?(.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$"
// +kubebuilder:validation:Required
Group string `json:"group"`
// resource of the IP address pool type known to an external IPAM controller.
// It is normally the plural form of the resource kind in lowercase, for example,
// ippools.
// +kubebuilder:example=ippools
- // +kubebuilder:validation:Pattern:="^[a-z0-9]([-a-z0-9]*[a-z0-9])?$"
+ // +kubebuilder:validation:Pattern="^[a-z0-9]([-a-z0-9]*[a-z0-9])?$"
// +kubebuilder:validation:Required
Resource string `json:"resource"`
// name of an IP address pool, for example, pool-config-1.
// +kubebuilder:example=pool-config-1
- // +kubebuilder:validation:Pattern:="^[a-z0-9]([-a-z0-9]*[a-z0-9])?$"
+ // +kubebuilder:validation:Pattern="^[a-z0-9]([-a-z0-9]*[a-z0-9])?$"
// +kubebuilder:validation:Required
Name string `json:"name"`
}
@@ -132,8 +132,8 @@ type NetworkDeviceSpec struct {
// for example, 192.168.1.1.
// +kubebuilder:validation:Format=ipv4
// +kubebuilder:validation:Format=ipv6
- // +kubebuilder:example=192.168.1.1
- // +kubebuilder:example=2001:DB8:0000:0000:244:17FF:FEB6:D37D
+ // +kubebuilder:example="192.168.1.1"
+ // +kubebuilder:example="2001:DB8:0000:0000:244:17FF:FEB6:D37D"
// +optional
Gateway string `json:"gateway,omitempty"`
@@ -146,8 +146,8 @@ type NetworkDeviceSpec struct {
// ipAddrs will be applied first followed by IP addresses from addressesFromPools.
// +kubebuilder:validation:Format=ipv4
// +kubebuilder:validation:Format=ipv6
- // +kubebuilder:example=192.168.1.100/24
- // +kubebuilder:example=2001:DB8:0000:0000:244:17FF:FEB6:D37D/64
+ // +kubebuilder:example="192.168.1.100/24"
+ // +kubebuilder:example="2001:DB8:0000:0000:244:17FF:FEB6:D37D/64"
// +optional
IPAddrs []string `json:"ipAddrs,omitempty"`
@@ -156,7 +156,7 @@ type NetworkDeviceSpec struct {
// source of IP addresses for this network device, nameservers should include a valid nameserver.
// +kubebuilder:validation:Format=ipv4
// +kubebuilder:validation:Format=ipv6
- // +kubebuilder:example=8.8.8.8
+ // +kubebuilder:example="8.8.8.8"
// +optional
Nameservers []string `json:"nameservers,omitempty"`
diff --git a/vendor/github.com/openshift/api/machine/v1beta1/zz_generated.crd-manifests/0000_10_machine-api_01_machinehealthchecks.crd.yaml b/vendor/github.com/openshift/api/machine/v1beta1/zz_generated.crd-manifests/0000_10_machine-api_01_machinehealthchecks.crd.yaml
index 41bc3f115f0ab19e882cf2181c3ce5d7065758e1..f175e8b98abf7b76a2d45b084fa12267800834dc 100644
--- a/vendor/github.com/openshift/api/machine/v1beta1/zz_generated.crd-manifests/0000_10_machine-api_01_machinehealthchecks.crd.yaml
+++ b/vendor/github.com/openshift/api/machine/v1beta1/zz_generated.crd-manifests/0000_10_machine-api_01_machinehealthchecks.crd.yaml
@@ -36,19 +36,24 @@ spec:
name: v1beta1
schema:
openAPIV3Schema:
- description: 'MachineHealthCheck is the Schema for the machinehealthchecks
- API Compatibility level 2: Stable within a major release for a minimum of
- 9 months or 3 minor releases (whichever is longer).'
+ description: |-
+ MachineHealthCheck is the Schema for the machinehealthchecks API
+ Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -60,92 +65,102 @@ spec:
- type: integer
- type: string
default: 100%
- description: Any farther remediation is only allowed if at most "MaxUnhealthy"
- machines selected by "selector" are not healthy. Expects either
- a postive integer value or a percentage value. Percentage values
- must be positive whole numbers and are capped at 100%. Both 0 and
- 0% are valid and will block all remediation.
+ description: |-
+ Any farther remediation is only allowed if at most "MaxUnhealthy" machines selected by
+ "selector" are not healthy.
+ Expects either a postive integer value or a percentage value.
+ Percentage values must be positive whole numbers and are capped at 100%.
+ Both 0 and 0% are valid and will block all remediation.
pattern: ^((100|[0-9]{1,2})%|[0-9]+)$
x-kubernetes-int-or-string: true
nodeStartupTimeout:
default: 10m
- description: Machines older than this duration without a node will
- be considered to have failed and will be remediated. To prevent
- Machines without Nodes from being removed, disable startup checks
- by setting this value explicitly to "0". Expects an unsigned duration
- string of decimal numbers each with optional fraction and a unit
- suffix, eg "300ms", "1.5h" or "2h45m". Valid time units are "ns",
- "us" (or "µs"), "ms", "s", "m", "h".
+ description: |-
+ Machines older than this duration without a node will be considered to have
+ failed and will be remediated.
+ To prevent Machines without Nodes from being removed, disable startup checks
+ by setting this value explicitly to "0".
+ Expects an unsigned duration string of decimal numbers each with optional
+ fraction and a unit suffix, eg "300ms", "1.5h" or "2h45m".
+ Valid time units are "ns", "us" (or "µs"), "ms", "s", "m", "h".
pattern: ^0|([0-9]+(\.[0-9]+)?(ns|us|µs|ms|s|m|h))+$
type: string
remediationTemplate:
- description: "RemediationTemplate is a reference to a remediation
- template provided by an infrastructure provider. \n This field is
- completely optional, when filled, the MachineHealthCheck controller
- creates a new object from the template referenced and hands off
- remediation of the machine to a controller that lives outside of
- Machine API Operator."
+ description: |-
+ RemediationTemplate is a reference to a remediation template
+ provided by an infrastructure provider.
+
+ This field is completely optional, when filled, the MachineHealthCheck controller
+ creates a new object from the template referenced and hands off remediation of the machine to
+ a controller that lives outside of Machine API Operator.
properties:
apiVersion:
description: API version of the referent.
type: string
fieldPath:
- description: 'If referring to a piece of an object instead of
- an entire object, this string should contain a valid JSON/Go
- field access statement, such as desiredState.manifest.containers[2].
- For example, if the object reference is to a container within
- a pod, this would take on a value like: "spec.containers{name}"
- (where "name" refers to the name of the container that triggered
- the event) or if no container name is specified "spec.containers[2]"
- (container with index 2 in this pod). This syntax is chosen
- only to have some well-defined way of referencing a part of
- an object. TODO: this design is not final and this field is
- subject to change in the future.'
+ description: |-
+ If referring to a piece of an object instead of an entire object, this string
+ should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
+ For example, if the object reference is to a container within a pod, this would take on a value like:
+ "spec.containers{name}" (where "name" refers to the name of the container that triggered
+ the event) or if no container name is specified "spec.containers[2]" (container with
+ index 2 in this pod). This syntax is chosen only to have some well-defined way of
+ referencing a part of an object.
type: string
kind:
- description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind of the referent.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
- description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
+ description: |-
+ Name of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
type: string
namespace:
- description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
+ description: |-
+ Namespace of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
type: string
resourceVersion:
- description: 'Specific resourceVersion to which this reference
- is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency'
+ description: |-
+ Specific resourceVersion to which this reference is made, if any.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
type: string
uid:
- description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids'
+ description: |-
+ UID of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
type: string
type: object
x-kubernetes-map-type: atomic
selector:
- description: 'Label selector to match machines whose health will be
- exercised. Note: An empty selector will match all machines.'
+ description: |-
+ Label selector to match machines whose health will be exercised.
+ Note: An empty selector will match all machines.
properties:
matchExpressions:
description: matchExpressions is a list of label selector requirements.
The requirements are ANDed.
items:
- description: A label selector requirement is a selector that
- contains values, a key, and an operator that relates the key
- and values.
+ description: |-
+ A label selector requirement is a selector that contains values, a key, and an operator that
+ relates the key and values.
properties:
key:
description: key is the label key that the selector applies
to.
type: string
operator:
- description: operator represents a key's relationship to
- a set of values. Valid operators are In, NotIn, Exists
- and DoesNotExist.
+ description: |-
+ operator represents a key's relationship to a set of values.
+ Valid operators are In, NotIn, Exists and DoesNotExist.
type: string
values:
- description: values is an array of string values. If the
- operator is In or NotIn, the values array must be non-empty.
- If the operator is Exists or DoesNotExist, the values
- array must be empty. This array is replaced during a strategic
+ description: |-
+ values is an array of string values. If the operator is In or NotIn,
+ the values array must be non-empty. If the operator is Exists or DoesNotExist,
+ the values array must be empty. This array is replaced during a strategic
merge patch.
items:
type: string
@@ -160,33 +175,32 @@ spec:
matchLabels:
additionalProperties:
type: string
- description: matchLabels is a map of {key,value} pairs. A single
- {key,value} in the matchLabels map is equivalent to an element
- of matchExpressions, whose key field is "key", the operator
- is "In", and the values array contains only "value". The requirements
- are ANDed.
+ description: |-
+ matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
+ map is equivalent to an element of matchExpressions, whose key field is "key", the
+ operator is "In", and the values array contains only "value". The requirements are ANDed.
type: object
type: object
x-kubernetes-map-type: atomic
unhealthyConditions:
- description: UnhealthyConditions contains a list of the conditions
- that determine whether a node is considered unhealthy. The conditions
- are combined in a logical OR, i.e. if any of the conditions is met,
- the node is unhealthy.
+ description: |-
+ UnhealthyConditions contains a list of the conditions that determine
+ whether a node is considered unhealthy. The conditions are combined in a
+ logical OR, i.e. if any of the conditions is met, the node is unhealthy.
items:
- description: UnhealthyCondition represents a Node condition type
- and value with a timeout specified as a duration. When the named
- condition has been in the given status for at least the timeout
- value, a node is considered unhealthy.
+ description: |-
+ UnhealthyCondition represents a Node condition type and value with a timeout
+ specified as a duration. When the named condition has been in the given
+ status for at least the timeout value, a node is considered unhealthy.
properties:
status:
minLength: 1
type: string
timeout:
- description: Expects an unsigned duration string of decimal
- numbers each with optional fraction and a unit suffix, eg
- "300ms", "1.5h" or "2h45m". Valid time units are "ns", "us"
- (or "µs"), "ms", "s", "m", "h".
+ description: |-
+ Expects an unsigned duration string of decimal numbers each with optional
+ fraction and a unit suffix, eg "300ms", "1.5h" or "2h45m".
+ Valid time units are "ns", "us" (or "µs"), "ms", "s", "m", "h".
pattern: ^([0-9]+(\.[0-9]+)?(ns|us|µs|ms|s|m|h))+$
type: string
type:
@@ -206,39 +220,41 @@ spec:
operational state.
properties:
lastTransitionTime:
- description: Last time the condition transitioned from one status
- to another. This should be when the underlying condition changed.
- If that is not known, then using the time when the API field
- changed is acceptable.
+ description: |-
+ Last time the condition transitioned from one status to another.
+ This should be when the underlying condition changed. If that is not known, then using the time when
+ the API field changed is acceptable.
format: date-time
type: string
message:
- description: A human readable message indicating details about
- the transition. This field may be empty.
+ description: |-
+ A human readable message indicating details about the transition.
+ This field may be empty.
type: string
reason:
- description: The reason for the condition's last transition
- in CamelCase. The specific API may choose whether or not this
- field is considered a guaranteed API. This field may not be
- empty.
+ description: |-
+ The reason for the condition's last transition in CamelCase.
+ The specific API may choose whether or not this field is considered a guaranteed API.
+ This field may not be empty.
type: string
severity:
- description: Severity provides an explicit classification of
- Reason code, so the users or machines can immediately understand
- the current situation and act accordingly. The Severity field
- MUST be set only when Status=False.
+ description: |-
+ Severity provides an explicit classification of Reason code, so the users or machines can immediately
+ understand the current situation and act accordingly.
+ The Severity field MUST be set only when Status=False.
type: string
status:
description: Status of the condition, one of True, False, Unknown.
type: string
type:
- description: Type of condition in CamelCase or in foo.example.com/CamelCase.
- Many .condition.type values are consistent across resources
- like Available, but because arbitrary conditions can be useful
- (see .node.status.conditions), the ability to deconflict is
- important.
+ description: |-
+ Type of condition in CamelCase or in foo.example.com/CamelCase.
+ Many .condition.type values are consistent across resources like Available, but because arbitrary conditions
+ can be useful (see .node.status.conditions), the ability to deconflict is important.
type: string
required:
+ - lastTransitionTime
+ - status
- type
type: object
type: array
@@ -256,9 +272,9 @@ spec:
minimum: 0
type: integer
remediationsAllowed:
- description: RemediationsAllowed is the number of further remediations
- allowed by this machine health check before maxUnhealthy short circuiting
- will be applied
+ description: |-
+ RemediationsAllowed is the number of further remediations allowed by this machine health check before
+ maxUnhealthy short circuiting will be applied
format: int32
minimum: 0
type: integer
diff --git a/vendor/github.com/openshift/api/machine/v1beta1/zz_generated.crd-manifests/0000_10_machine-api_01_machines-CustomNoUpgrade.crd.yaml b/vendor/github.com/openshift/api/machine/v1beta1/zz_generated.crd-manifests/0000_10_machine-api_01_machines-CustomNoUpgrade.crd.yaml
index 0ed0b4ffd931f3f90db5df058d89fdb9438b0a25..f03eba4679a72a671c641900452a24f37e1a22ba 100644
--- a/vendor/github.com/openshift/api/machine/v1beta1/zz_generated.crd-manifests/0000_10_machine-api_01_machines-CustomNoUpgrade.crd.yaml
+++ b/vendor/github.com/openshift/api/machine/v1beta1/zz_generated.crd-manifests/0000_10_machine-api_01_machines-CustomNoUpgrade.crd.yaml
@@ -57,19 +57,24 @@ spec:
name: v1beta1
schema:
openAPIV3Schema:
- description: 'Machine is the Schema for the machines API Compatibility level
- 2: Stable within a major release for a minimum of 9 months or 3 minor releases
- (whichever is longer).'
+ description: |-
+ Machine is the Schema for the machines API
+ Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -77,49 +82,48 @@ spec:
description: MachineSpec defines the desired state of Machine
properties:
authoritativeAPI:
- description: authoritativeAPI is the API that is authoritative for
- this resource. Valid values are MachineAPI and ClusterAPI. When
- set to MachineAPI, writes to the spec of the machine.openshift.io
- copy of this resource will be reflected into the cluster.x-k8s.io
- copy. When set to ClusterAPI, writes to the spec of the cluster.x-k8s.io
- copy of this resource will be reflected into the machine.openshift.io
- copy. Updates to the status will be reflected in both copies of
- the resource, based on the controller implementing the functionality
- of the API. Currently the authoritative API determines which controller
- will manage the resource, this will change in a future release.
- To ensure the change has been accepted, please verify that the `status.authoritativeAPI`
- field has been updated to the desired value and that the `Synchronized`
- condition is present and set to `True`.
+ default: MachineAPI
+ description: |-
+ authoritativeAPI is the API that is authoritative for this resource.
+ Valid values are MachineAPI and ClusterAPI.
+ When set to MachineAPI, writes to the spec of the machine.openshift.io copy of this resource will be reflected into the cluster.x-k8s.io copy.
+ When set to ClusterAPI, writes to the spec of the cluster.x-k8s.io copy of this resource will be reflected into the machine.openshift.io copy.
+ Updates to the status will be reflected in both copies of the resource, based on the controller implementing the functionality of the API.
+ Currently the authoritative API determines which controller will manage the resource, this will change in a future release.
+ To ensure the change has been accepted, please verify that the `status.authoritativeAPI` field has been updated to the desired value and that the `Synchronized` condition is present and set to `True`.
enum:
- MachineAPI
- ClusterAPI
type: string
lifecycleHooks:
- description: LifecycleHooks allow users to pause operations on the
- machine at certain predefined points within the machine lifecycle.
+ description: |-
+ LifecycleHooks allow users to pause operations on the machine at
+ certain predefined points within the machine lifecycle.
properties:
preDrain:
- description: PreDrain hooks prevent the machine from being drained.
+ description: |-
+ PreDrain hooks prevent the machine from being drained.
This also blocks further lifecycle events, such as termination.
items:
description: LifecycleHook represents a single instance of a
lifecycle hook
properties:
name:
- description: Name defines a unique name for the lifcycle
- hook. The name should be unique and descriptive, ideally
- 1-3 words, in CamelCase or it may be namespaced, eg. foo.example.com/CamelCase.
- Names must be unique and should only be managed by a single
- entity.
+ description: |-
+ Name defines a unique name for the lifcycle hook.
+ The name should be unique and descriptive, ideally 1-3 words, in CamelCase or
+ it may be namespaced, eg. foo.example.com/CamelCase.
+ Names must be unique and should only be managed by a single entity.
maxLength: 256
minLength: 3
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
owner:
- description: Owner defines the owner of the lifecycle hook.
+ description: |-
+ Owner defines the owner of the lifecycle hook.
This should be descriptive enough so that users can identify
- who/what is responsible for blocking the lifecycle. This
- could be the name of a controller (e.g. clusteroperator/etcd)
+ who/what is responsible for blocking the lifecycle.
+ This could be the name of a controller (e.g. clusteroperator/etcd)
or an administrator managing the hook.
maxLength: 512
minLength: 3
@@ -133,28 +137,29 @@ spec:
- name
x-kubernetes-list-type: map
preTerminate:
- description: PreTerminate hooks prevent the machine from being
- terminated. PreTerminate hooks be actioned after the Machine
- has been drained.
+ description: |-
+ PreTerminate hooks prevent the machine from being terminated.
+ PreTerminate hooks be actioned after the Machine has been drained.
items:
description: LifecycleHook represents a single instance of a
lifecycle hook
properties:
name:
- description: Name defines a unique name for the lifcycle
- hook. The name should be unique and descriptive, ideally
- 1-3 words, in CamelCase or it may be namespaced, eg. foo.example.com/CamelCase.
- Names must be unique and should only be managed by a single
- entity.
+ description: |-
+ Name defines a unique name for the lifcycle hook.
+ The name should be unique and descriptive, ideally 1-3 words, in CamelCase or
+ it may be namespaced, eg. foo.example.com/CamelCase.
+ Names must be unique and should only be managed by a single entity.
maxLength: 256
minLength: 3
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
owner:
- description: Owner defines the owner of the lifecycle hook.
+ description: |-
+ Owner defines the owner of the lifecycle hook.
This should be descriptive enough so that users can identify
- who/what is responsible for blocking the lifecycle. This
- could be the name of a controller (e.g. clusteroperator/etcd)
+ who/what is responsible for blocking the lifecycle.
+ This could be the name of a controller (e.g. clusteroperator/etcd)
or an administrator managing the hook.
maxLength: 512
minLength: 3
@@ -169,94 +174,111 @@ spec:
x-kubernetes-list-type: map
type: object
metadata:
- description: ObjectMeta will autopopulate the Node created. Use this
- to indicate what labels, annotations, name prefix, etc., should
- be used when creating the Node.
+ description: |-
+ ObjectMeta will autopopulate the Node created. Use this to
+ indicate what labels, annotations, name prefix, etc., should be used
+ when creating the Node.
properties:
annotations:
additionalProperties:
type: string
- description: 'Annotations is an unstructured key value map stored
- with a resource that may be set by external tools to store and
- retrieve arbitrary metadata. They are not queryable and should
- be preserved when modifying objects. More info: http://kubernetes.io/docs/user-guide/annotations'
+ description: |-
+ Annotations is an unstructured key value map stored with a resource that may be
+ set by external tools to store and retrieve arbitrary metadata. They are not
+ queryable and should be preserved when modifying objects.
+ More info: http://kubernetes.io/docs/user-guide/annotations
type: object
generateName:
- description: "GenerateName is an optional prefix, used by the
- server, to generate a unique name ONLY IF the Name field has
- not been provided. If this field is used, the name returned
- to the client will be different than the name passed. This value
- will also be combined with a unique suffix. The provided value
- has the same validation rules as the Name field, and may be
- truncated by the length of the suffix required to make the value
- unique on the server. \n If this field is specified and the
- generated name exists, the server will NOT return a 409 - instead,
- it will either return 201 Created or 500 with Reason ServerTimeout
- indicating a unique name could not be found in the time allotted,
- and the client should retry (optionally after the time indicated
- in the Retry-After header). \n Applied only if Name is not specified.
- More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency"
+ description: |-
+ GenerateName is an optional prefix, used by the server, to generate a unique
+ name ONLY IF the Name field has not been provided.
+ If this field is used, the name returned to the client will be different
+ than the name passed. This value will also be combined with a unique suffix.
+ The provided value has the same validation rules as the Name field,
+ and may be truncated by the length of the suffix required to make the value
+ unique on the server.
+
+ If this field is specified and the generated name exists, the server will
+ NOT return a 409 - instead, it will either return 201 Created or 500 with Reason
+ ServerTimeout indicating a unique name could not be found in the time allotted, and the client
+ should retry (optionally after the time indicated in the Retry-After header).
+
+ Applied only if Name is not specified.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
type: string
labels:
additionalProperties:
type: string
- description: 'Map of string keys and values that can be used to
- organize and categorize (scope and select) objects. May match
- selectors of replication controllers and services. More info:
- http://kubernetes.io/docs/user-guide/labels'
+ description: |-
+ Map of string keys and values that can be used to organize and categorize
+ (scope and select) objects. May match selectors of replication controllers
+ and services.
+ More info: http://kubernetes.io/docs/user-guide/labels
type: object
name:
- description: 'Name must be unique within a namespace. Is required
- when creating resources, although some resources may allow a
- client to request the generation of an appropriate name automatically.
- Name is primarily intended for creation idempotence and configuration
- definition. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/identifiers#names'
+ description: |-
+ Name must be unique within a namespace. Is required when creating resources, although
+ some resources may allow a client to request the generation of an appropriate name
+ automatically. Name is primarily intended for creation idempotence and configuration
+ definition.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/identifiers#names
type: string
namespace:
- description: "Namespace defines the space within each name must
- be unique. An empty namespace is equivalent to the \"default\"
- namespace, but \"default\" is the canonical representation.
- Not all objects are required to be scoped to a namespace - the
- value of this field for those objects will be empty. \n Must
- be a DNS_LABEL. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/namespaces"
+ description: |-
+ Namespace defines the space within each name must be unique. An empty namespace is
+ equivalent to the "default" namespace, but "default" is the canonical representation.
+ Not all objects are required to be scoped to a namespace - the value of this field for
+ those objects will be empty.
+
+ Must be a DNS_LABEL.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/namespaces
type: string
ownerReferences:
- description: List of objects depended by this object. If ALL objects
- in the list have been deleted, this object will be garbage collected.
- If this object is managed by a controller, then an entry in
- this list will point to this controller, with the controller
- field set to true. There cannot be more than one managing controller.
+ description: |-
+ List of objects depended by this object. If ALL objects in the list have
+ been deleted, this object will be garbage collected. If this object is managed by a controller,
+ then an entry in this list will point to this controller, with the controller field set to true.
+ There cannot be more than one managing controller.
items:
- description: OwnerReference contains enough information to let
- you identify an owning object. An owning object must be in
- the same namespace as the dependent, or be cluster-scoped,
- so there is no namespace field.
+ description: |-
+ OwnerReference contains enough information to let you identify an owning
+ object. An owning object must be in the same namespace as the dependent, or
+ be cluster-scoped, so there is no namespace field.
properties:
apiVersion:
description: API version of the referent.
type: string
blockOwnerDeletion:
- description: If true, AND if the owner has the "foregroundDeletion"
- finalizer, then the owner cannot be deleted from the key-value
- store until this reference is removed. See https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
- for how the garbage collector interacts with this field
- and enforces the foreground deletion. Defaults to false.
- To set this field, a user needs "delete" permission of
- the owner, otherwise 422 (Unprocessable Entity) will be
- returned.
+ description: |-
+ If true, AND if the owner has the "foregroundDeletion" finalizer, then
+ the owner cannot be deleted from the key-value store until this
+ reference is removed.
+ See https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
+ for how the garbage collector interacts with this field and enforces the foreground deletion.
+ Defaults to false.
+ To set this field, a user needs "delete" permission of the owner,
+ otherwise 422 (Unprocessable Entity) will be returned.
type: boolean
controller:
description: If true, this reference points to the managing
controller.
type: boolean
kind:
- description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind of the referent.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
- description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names'
+ description: |-
+ Name of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names
type: string
uid:
- description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids'
+ description: |-
+ UID of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids
type: string
required:
- apiVersion
@@ -271,19 +293,16 @@ spec:
x-kubernetes-list-type: map
type: object
providerID:
- description: ProviderID is the identification ID of the machine provided
- by the provider. This field must match the provider ID as seen on
- the node object corresponding to this machine. This field is required
- by higher level consumers of cluster-api. Example use case is cluster
- autoscaler with cluster-api as provider. Clean-up logic in the autoscaler
- compares machines to nodes to find out machines at provider which
- could not get registered as Kubernetes nodes. With cluster-api as
- a generic out-of-tree provider for autoscaler, this field is required
- by autoscaler to be able to have a provider view of the list of
- machines. Another list of nodes is queried from the k8s apiserver
- and then a comparison is done to find out unregistered machines
- and are marked for delete. This field will be set by the actuators
- and consumed by higher level entities like autoscaler that will
+ description: |-
+ ProviderID is the identification ID of the machine provided by the provider.
+ This field must match the provider ID as seen on the node object corresponding to this machine.
+ This field is required by higher level consumers of cluster-api. Example use case is cluster autoscaler
+ with cluster-api as provider. Clean-up logic in the autoscaler compares machines to nodes to find out
+ machines at provider which could not get registered as Kubernetes nodes. With cluster-api as a
+ generic out-of-tree provider for autoscaler, this field is required by autoscaler to be
+ able to have a provider view of the list of machines. Another list of nodes is queried from the k8s apiserver
+ and then a comparison is done to find out unregistered machines and are marked for delete.
+ This field will be set by the actuators and consumed by higher level entities like autoscaler that will
be interfacing with cluster-api as generic provider.
type: string
providerSpec:
@@ -291,36 +310,40 @@ spec:
to use during node creation.
properties:
value:
- description: Value is an inlined, serialized representation of
- the resource configuration. It is recommended that providers
- maintain their own versioned API types that should be serialized/deserialized
- from this field, akin to component config.
+ description: |-
+ Value is an inlined, serialized representation of the resource
+ configuration. It is recommended that providers maintain their own
+ versioned API types that should be serialized/deserialized from this
+ field, akin to component config.
type: object
x-kubernetes-preserve-unknown-fields: true
type: object
taints:
- description: The list of the taints to be applied to the corresponding
- Node in additive manner. This list will not overwrite any other
- taints added to the Node on an ongoing basis by other entities.
- These taints should be actively reconciled e.g. if you ask the machine
- controller to apply a taint and then manually remove the taint the
- machine controller will put it back) but not have the machine controller
+ description: |-
+ The list of the taints to be applied to the corresponding Node in additive
+ manner. This list will not overwrite any other taints added to the Node on
+ an ongoing basis by other entities. These taints should be actively reconciled
+ e.g. if you ask the machine controller to apply a taint and then manually remove
+ the taint the machine controller will put it back) but not have the machine controller
remove any taints
items:
- description: The node this Taint is attached to has the "effect"
- on any pod that does not tolerate the Taint.
+ description: |-
+ The node this Taint is attached to has the "effect" on
+ any pod that does not tolerate the Taint.
properties:
effect:
- description: Required. The effect of the taint on pods that
- do not tolerate the taint. Valid effects are NoSchedule, PreferNoSchedule
- and NoExecute.
+ description: |-
+ Required. The effect of the taint on pods
+ that do not tolerate the taint.
+ Valid effects are NoSchedule, PreferNoSchedule and NoExecute.
type: string
key:
description: Required. The taint key to be applied to a node.
type: string
timeAdded:
- description: TimeAdded represents the time at which the taint
- was added. It is only written for NoExecute taints.
+ description: |-
+ TimeAdded represents the time at which the taint was added.
+ It is only written for NoExecute taints.
format: date-time
type: string
value:
@@ -356,13 +379,12 @@ spec:
type: array
x-kubernetes-list-type: atomic
authoritativeAPI:
- description: authoritativeAPI is the API that is authoritative for
- this resource. Valid values are MachineAPI, ClusterAPI and Migrating.
- This value is updated by the migration controller to reflect the
- authoritative API. Machine API and Cluster API controllers use this
- value to determine whether or not to reconcile the resource. When
- set to Migrating, the migration controller is currently performing
- the handover of authority from one API to the other.
+ description: |-
+ authoritativeAPI is the API that is authoritative for this resource.
+ Valid values are MachineAPI, ClusterAPI and Migrating.
+ This value is updated by the migration controller to reflect the authoritative API.
+ Machine API and Cluster API controllers use this value to determine whether or not to reconcile the resource.
+ When set to Migrating, the migration controller is currently performing the handover of authority from one API to the other.
enum:
- MachineAPI
- ClusterAPI
@@ -380,39 +402,41 @@ spec:
operational state.
properties:
lastTransitionTime:
- description: Last time the condition transitioned from one status
- to another. This should be when the underlying condition changed.
- If that is not known, then using the time when the API field
- changed is acceptable.
+ description: |-
+ Last time the condition transitioned from one status to another.
+ This should be when the underlying condition changed. If that is not known, then using the time when
+ the API field changed is acceptable.
format: date-time
type: string
message:
- description: A human readable message indicating details about
- the transition. This field may be empty.
+ description: |-
+ A human readable message indicating details about the transition.
+ This field may be empty.
type: string
reason:
- description: The reason for the condition's last transition
- in CamelCase. The specific API may choose whether or not this
- field is considered a guaranteed API. This field may not be
- empty.
+ description: |-
+ The reason for the condition's last transition in CamelCase.
+ The specific API may choose whether or not this field is considered a guaranteed API.
+ This field may not be empty.
type: string
severity:
- description: Severity provides an explicit classification of
- Reason code, so the users or machines can immediately understand
- the current situation and act accordingly. The Severity field
- MUST be set only when Status=False.
+ description: |-
+ Severity provides an explicit classification of Reason code, so the users or machines can immediately
+ understand the current situation and act accordingly.
+ The Severity field MUST be set only when Status=False.
type: string
status:
description: Status of the condition, one of True, False, Unknown.
type: string
type:
- description: Type of condition in CamelCase or in foo.example.com/CamelCase.
- Many .condition.type values are consistent across resources
- like Available, but because arbitrary conditions can be useful
- (see .node.status.conditions), the ability to deconflict is
- important.
+ description: |-
+ Type of condition in CamelCase or in foo.example.com/CamelCase.
+ Many .condition.type values are consistent across resources like Available, but because arbitrary conditions
+ can be useful (see .node.status.conditions), the ability to deconflict is important.
type: string
required:
+ - lastTransitionTime
+ - status
- type
type: object
type: array
@@ -420,41 +444,49 @@ spec:
- type
x-kubernetes-list-type: map
errorMessage:
- description: "ErrorMessage will be set in the event that there is
- a terminal problem reconciling the Machine and will contain a more
- verbose string suitable for logging and human consumption. \n This
- field should not be set for transitive errors that a controller
- faces that are expected to be fixed automatically over time (like
- service outages), but instead indicate that something is fundamentally
- wrong with the Machine's spec or the configuration of the controller,
- and that manual intervention is required. Examples of terminal errors
- would be invalid combinations of settings in the spec, values that
- are unsupported by the controller, or the responsible controller
- itself being critically misconfigured. \n Any transient errors that
- occur during the reconciliation of Machines can be added as events
- to the Machine object and/or logged in the controller's output."
+ description: |-
+ ErrorMessage will be set in the event that there is a terminal problem
+ reconciling the Machine and will contain a more verbose string suitable
+ for logging and human consumption.
+
+ This field should not be set for transitive errors that a controller
+ faces that are expected to be fixed automatically over
+ time (like service outages), but instead indicate that something is
+ fundamentally wrong with the Machine's spec or the configuration of
+ the controller, and that manual intervention is required. Examples
+ of terminal errors would be invalid combinations of settings in the
+ spec, values that are unsupported by the controller, or the
+ responsible controller itself being critically misconfigured.
+
+ Any transient errors that occur during the reconciliation of Machines
+ can be added as events to the Machine object and/or logged in the
+ controller's output.
type: string
errorReason:
- description: "ErrorReason will be set in the event that there is a
- terminal problem reconciling the Machine and will contain a succinct
- value suitable for machine interpretation. \n This field should
- not be set for transitive errors that a controller faces that are
- expected to be fixed automatically over time (like service outages),
- but instead indicate that something is fundamentally wrong with
- the Machine's spec or the configuration of the controller, and that
- manual intervention is required. Examples of terminal errors would
- be invalid combinations of settings in the spec, values that are
- unsupported by the controller, or the responsible controller itself
- being critically misconfigured. \n Any transient errors that occur
- during the reconciliation of Machines can be added as events to
- the Machine object and/or logged in the controller's output."
+ description: |-
+ ErrorReason will be set in the event that there is a terminal problem
+ reconciling the Machine and will contain a succinct value suitable
+ for machine interpretation.
+
+ This field should not be set for transitive errors that a controller
+ faces that are expected to be fixed automatically over
+ time (like service outages), but instead indicate that something is
+ fundamentally wrong with the Machine's spec or the configuration of
+ the controller, and that manual intervention is required. Examples
+ of terminal errors would be invalid combinations of settings in the
+ spec, values that are unsupported by the controller, or the
+ responsible controller itself being critically misconfigured.
+
+ Any transient errors that occur during the reconciliation of Machines
+ can be added as events to the Machine object and/or logged in the
+ controller's output.
type: string
lastOperation:
- description: LastOperation describes the last-operation performed
- by the machine-controller. This API should be useful as a history
- in terms of the latest operation performed on the specific machine.
- It should also convey the state of the latest-operation for example
- if it is still on-going, failed or completed successfully.
+ description: |-
+ LastOperation describes the last-operation performed by the machine-controller.
+ This API should be useful as a history in terms of the latest operation performed on the
+ specific machine. It should also convey the state of the latest-operation for example if
+ it is still on-going, failed or completed successfully.
properties:
description:
description: Description is the human-readable description of
@@ -466,11 +498,13 @@ spec:
format: date-time
type: string
state:
- description: State is the current status of the last performed
- operation. E.g. Processing, Failed, Successful etc
+ description: |-
+ State is the current status of the last performed operation.
+ E.g. Processing, Failed, Successful etc
type: string
type:
- description: Type is the type of operation which was last performed.
+ description: |-
+ Type is the type of operation which was last performed.
E.g. Create, Delete, Update etc
type: string
type: object
@@ -485,52 +519,59 @@ spec:
description: API version of the referent.
type: string
fieldPath:
- description: 'If referring to a piece of an object instead of
- an entire object, this string should contain a valid JSON/Go
- field access statement, such as desiredState.manifest.containers[2].
- For example, if the object reference is to a container within
- a pod, this would take on a value like: "spec.containers{name}"
- (where "name" refers to the name of the container that triggered
- the event) or if no container name is specified "spec.containers[2]"
- (container with index 2 in this pod). This syntax is chosen
- only to have some well-defined way of referencing a part of
- an object. TODO: this design is not final and this field is
- subject to change in the future.'
+ description: |-
+ If referring to a piece of an object instead of an entire object, this string
+ should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
+ For example, if the object reference is to a container within a pod, this would take on a value like:
+ "spec.containers{name}" (where "name" refers to the name of the container that triggered
+ the event) or if no container name is specified "spec.containers[2]" (container with
+ index 2 in this pod). This syntax is chosen only to have some well-defined way of
+ referencing a part of an object.
type: string
kind:
- description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind of the referent.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
- description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
+ description: |-
+ Name of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
type: string
namespace:
- description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
+ description: |-
+ Namespace of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
type: string
resourceVersion:
- description: 'Specific resourceVersion to which this reference
- is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency'
+ description: |-
+ Specific resourceVersion to which this reference is made, if any.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
type: string
uid:
- description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids'
+ description: |-
+ UID of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
type: string
type: object
x-kubernetes-map-type: atomic
phase:
- description: 'Phase represents the current phase of machine actuation.
- One of: Failed, Provisioning, Provisioned, Running, Deleting'
+ description: |-
+ Phase represents the current phase of machine actuation.
+ One of: Failed, Provisioning, Provisioned, Running, Deleting
type: string
providerStatus:
- description: ProviderStatus details a Provider-specific status. It
- is recommended that providers maintain their own versioned API types
- that should be serialized/deserialized from this field.
+ description: |-
+ ProviderStatus details a Provider-specific status.
+ It is recommended that providers maintain their
+ own versioned API types that should be
+ serialized/deserialized from this field.
type: object
x-kubernetes-preserve-unknown-fields: true
synchronizedGeneration:
- description: synchronizedGeneration is the generation of the authoritative
- resource that the non-authoritative resource is synchronised with.
- This field is set when the authoritative resource is updated and
- the sync controller has updated the non-authoritative resource to
- match.
+ description: |-
+ synchronizedGeneration is the generation of the authoritative resource that the non-authoritative resource is synchronised with.
+ This field is set when the authoritative resource is updated and the sync controller has updated the non-authoritative resource to match.
format: int64
minimum: 0
type: integer
diff --git a/vendor/github.com/openshift/api/machine/v1beta1/zz_generated.crd-manifests/0000_10_machine-api_01_machines-Default.crd.yaml b/vendor/github.com/openshift/api/machine/v1beta1/zz_generated.crd-manifests/0000_10_machine-api_01_machines-Default.crd.yaml
index c3ed7f231cf84ec329a5e99e05cd34c2fd782713..6788e737b350855261ec97a3b03c7527054b1db4 100644
--- a/vendor/github.com/openshift/api/machine/v1beta1/zz_generated.crd-manifests/0000_10_machine-api_01_machines-Default.crd.yaml
+++ b/vendor/github.com/openshift/api/machine/v1beta1/zz_generated.crd-manifests/0000_10_machine-api_01_machines-Default.crd.yaml
@@ -57,19 +57,24 @@ spec:
name: v1beta1
schema:
openAPIV3Schema:
- description: 'Machine is the Schema for the machines API Compatibility level
- 2: Stable within a major release for a minimum of 9 months or 3 minor releases
- (whichever is longer).'
+ description: |-
+ Machine is the Schema for the machines API
+ Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -77,31 +82,34 @@ spec:
description: MachineSpec defines the desired state of Machine
properties:
lifecycleHooks:
- description: LifecycleHooks allow users to pause operations on the
- machine at certain predefined points within the machine lifecycle.
+ description: |-
+ LifecycleHooks allow users to pause operations on the machine at
+ certain predefined points within the machine lifecycle.
properties:
preDrain:
- description: PreDrain hooks prevent the machine from being drained.
+ description: |-
+ PreDrain hooks prevent the machine from being drained.
This also blocks further lifecycle events, such as termination.
items:
description: LifecycleHook represents a single instance of a
lifecycle hook
properties:
name:
- description: Name defines a unique name for the lifcycle
- hook. The name should be unique and descriptive, ideally
- 1-3 words, in CamelCase or it may be namespaced, eg. foo.example.com/CamelCase.
- Names must be unique and should only be managed by a single
- entity.
+ description: |-
+ Name defines a unique name for the lifcycle hook.
+ The name should be unique and descriptive, ideally 1-3 words, in CamelCase or
+ it may be namespaced, eg. foo.example.com/CamelCase.
+ Names must be unique and should only be managed by a single entity.
maxLength: 256
minLength: 3
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
owner:
- description: Owner defines the owner of the lifecycle hook.
+ description: |-
+ Owner defines the owner of the lifecycle hook.
This should be descriptive enough so that users can identify
- who/what is responsible for blocking the lifecycle. This
- could be the name of a controller (e.g. clusteroperator/etcd)
+ who/what is responsible for blocking the lifecycle.
+ This could be the name of a controller (e.g. clusteroperator/etcd)
or an administrator managing the hook.
maxLength: 512
minLength: 3
@@ -115,28 +123,29 @@ spec:
- name
x-kubernetes-list-type: map
preTerminate:
- description: PreTerminate hooks prevent the machine from being
- terminated. PreTerminate hooks be actioned after the Machine
- has been drained.
+ description: |-
+ PreTerminate hooks prevent the machine from being terminated.
+ PreTerminate hooks be actioned after the Machine has been drained.
items:
description: LifecycleHook represents a single instance of a
lifecycle hook
properties:
name:
- description: Name defines a unique name for the lifcycle
- hook. The name should be unique and descriptive, ideally
- 1-3 words, in CamelCase or it may be namespaced, eg. foo.example.com/CamelCase.
- Names must be unique and should only be managed by a single
- entity.
+ description: |-
+ Name defines a unique name for the lifcycle hook.
+ The name should be unique and descriptive, ideally 1-3 words, in CamelCase or
+ it may be namespaced, eg. foo.example.com/CamelCase.
+ Names must be unique and should only be managed by a single entity.
maxLength: 256
minLength: 3
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
owner:
- description: Owner defines the owner of the lifecycle hook.
+ description: |-
+ Owner defines the owner of the lifecycle hook.
This should be descriptive enough so that users can identify
- who/what is responsible for blocking the lifecycle. This
- could be the name of a controller (e.g. clusteroperator/etcd)
+ who/what is responsible for blocking the lifecycle.
+ This could be the name of a controller (e.g. clusteroperator/etcd)
or an administrator managing the hook.
maxLength: 512
minLength: 3
@@ -151,94 +160,111 @@ spec:
x-kubernetes-list-type: map
type: object
metadata:
- description: ObjectMeta will autopopulate the Node created. Use this
- to indicate what labels, annotations, name prefix, etc., should
- be used when creating the Node.
+ description: |-
+ ObjectMeta will autopopulate the Node created. Use this to
+ indicate what labels, annotations, name prefix, etc., should be used
+ when creating the Node.
properties:
annotations:
additionalProperties:
type: string
- description: 'Annotations is an unstructured key value map stored
- with a resource that may be set by external tools to store and
- retrieve arbitrary metadata. They are not queryable and should
- be preserved when modifying objects. More info: http://kubernetes.io/docs/user-guide/annotations'
+ description: |-
+ Annotations is an unstructured key value map stored with a resource that may be
+ set by external tools to store and retrieve arbitrary metadata. They are not
+ queryable and should be preserved when modifying objects.
+ More info: http://kubernetes.io/docs/user-guide/annotations
type: object
generateName:
- description: "GenerateName is an optional prefix, used by the
- server, to generate a unique name ONLY IF the Name field has
- not been provided. If this field is used, the name returned
- to the client will be different than the name passed. This value
- will also be combined with a unique suffix. The provided value
- has the same validation rules as the Name field, and may be
- truncated by the length of the suffix required to make the value
- unique on the server. \n If this field is specified and the
- generated name exists, the server will NOT return a 409 - instead,
- it will either return 201 Created or 500 with Reason ServerTimeout
- indicating a unique name could not be found in the time allotted,
- and the client should retry (optionally after the time indicated
- in the Retry-After header). \n Applied only if Name is not specified.
- More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency"
+ description: |-
+ GenerateName is an optional prefix, used by the server, to generate a unique
+ name ONLY IF the Name field has not been provided.
+ If this field is used, the name returned to the client will be different
+ than the name passed. This value will also be combined with a unique suffix.
+ The provided value has the same validation rules as the Name field,
+ and may be truncated by the length of the suffix required to make the value
+ unique on the server.
+
+ If this field is specified and the generated name exists, the server will
+ NOT return a 409 - instead, it will either return 201 Created or 500 with Reason
+ ServerTimeout indicating a unique name could not be found in the time allotted, and the client
+ should retry (optionally after the time indicated in the Retry-After header).
+
+ Applied only if Name is not specified.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
type: string
labels:
additionalProperties:
type: string
- description: 'Map of string keys and values that can be used to
- organize and categorize (scope and select) objects. May match
- selectors of replication controllers and services. More info:
- http://kubernetes.io/docs/user-guide/labels'
+ description: |-
+ Map of string keys and values that can be used to organize and categorize
+ (scope and select) objects. May match selectors of replication controllers
+ and services.
+ More info: http://kubernetes.io/docs/user-guide/labels
type: object
name:
- description: 'Name must be unique within a namespace. Is required
- when creating resources, although some resources may allow a
- client to request the generation of an appropriate name automatically.
- Name is primarily intended for creation idempotence and configuration
- definition. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/identifiers#names'
+ description: |-
+ Name must be unique within a namespace. Is required when creating resources, although
+ some resources may allow a client to request the generation of an appropriate name
+ automatically. Name is primarily intended for creation idempotence and configuration
+ definition.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/identifiers#names
type: string
namespace:
- description: "Namespace defines the space within each name must
- be unique. An empty namespace is equivalent to the \"default\"
- namespace, but \"default\" is the canonical representation.
- Not all objects are required to be scoped to a namespace - the
- value of this field for those objects will be empty. \n Must
- be a DNS_LABEL. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/namespaces"
+ description: |-
+ Namespace defines the space within each name must be unique. An empty namespace is
+ equivalent to the "default" namespace, but "default" is the canonical representation.
+ Not all objects are required to be scoped to a namespace - the value of this field for
+ those objects will be empty.
+
+ Must be a DNS_LABEL.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/namespaces
type: string
ownerReferences:
- description: List of objects depended by this object. If ALL objects
- in the list have been deleted, this object will be garbage collected.
- If this object is managed by a controller, then an entry in
- this list will point to this controller, with the controller
- field set to true. There cannot be more than one managing controller.
+ description: |-
+ List of objects depended by this object. If ALL objects in the list have
+ been deleted, this object will be garbage collected. If this object is managed by a controller,
+ then an entry in this list will point to this controller, with the controller field set to true.
+ There cannot be more than one managing controller.
items:
- description: OwnerReference contains enough information to let
- you identify an owning object. An owning object must be in
- the same namespace as the dependent, or be cluster-scoped,
- so there is no namespace field.
+ description: |-
+ OwnerReference contains enough information to let you identify an owning
+ object. An owning object must be in the same namespace as the dependent, or
+ be cluster-scoped, so there is no namespace field.
properties:
apiVersion:
description: API version of the referent.
type: string
blockOwnerDeletion:
- description: If true, AND if the owner has the "foregroundDeletion"
- finalizer, then the owner cannot be deleted from the key-value
- store until this reference is removed. See https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
- for how the garbage collector interacts with this field
- and enforces the foreground deletion. Defaults to false.
- To set this field, a user needs "delete" permission of
- the owner, otherwise 422 (Unprocessable Entity) will be
- returned.
+ description: |-
+ If true, AND if the owner has the "foregroundDeletion" finalizer, then
+ the owner cannot be deleted from the key-value store until this
+ reference is removed.
+ See https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
+ for how the garbage collector interacts with this field and enforces the foreground deletion.
+ Defaults to false.
+ To set this field, a user needs "delete" permission of the owner,
+ otherwise 422 (Unprocessable Entity) will be returned.
type: boolean
controller:
description: If true, this reference points to the managing
controller.
type: boolean
kind:
- description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind of the referent.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
- description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names'
+ description: |-
+ Name of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names
type: string
uid:
- description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids'
+ description: |-
+ UID of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids
type: string
required:
- apiVersion
@@ -253,19 +279,16 @@ spec:
x-kubernetes-list-type: map
type: object
providerID:
- description: ProviderID is the identification ID of the machine provided
- by the provider. This field must match the provider ID as seen on
- the node object corresponding to this machine. This field is required
- by higher level consumers of cluster-api. Example use case is cluster
- autoscaler with cluster-api as provider. Clean-up logic in the autoscaler
- compares machines to nodes to find out machines at provider which
- could not get registered as Kubernetes nodes. With cluster-api as
- a generic out-of-tree provider for autoscaler, this field is required
- by autoscaler to be able to have a provider view of the list of
- machines. Another list of nodes is queried from the k8s apiserver
- and then a comparison is done to find out unregistered machines
- and are marked for delete. This field will be set by the actuators
- and consumed by higher level entities like autoscaler that will
+ description: |-
+ ProviderID is the identification ID of the machine provided by the provider.
+ This field must match the provider ID as seen on the node object corresponding to this machine.
+ This field is required by higher level consumers of cluster-api. Example use case is cluster autoscaler
+ with cluster-api as provider. Clean-up logic in the autoscaler compares machines to nodes to find out
+ machines at provider which could not get registered as Kubernetes nodes. With cluster-api as a
+ generic out-of-tree provider for autoscaler, this field is required by autoscaler to be
+ able to have a provider view of the list of machines. Another list of nodes is queried from the k8s apiserver
+ and then a comparison is done to find out unregistered machines and are marked for delete.
+ This field will be set by the actuators and consumed by higher level entities like autoscaler that will
be interfacing with cluster-api as generic provider.
type: string
providerSpec:
@@ -273,36 +296,40 @@ spec:
to use during node creation.
properties:
value:
- description: Value is an inlined, serialized representation of
- the resource configuration. It is recommended that providers
- maintain their own versioned API types that should be serialized/deserialized
- from this field, akin to component config.
+ description: |-
+ Value is an inlined, serialized representation of the resource
+ configuration. It is recommended that providers maintain their own
+ versioned API types that should be serialized/deserialized from this
+ field, akin to component config.
type: object
x-kubernetes-preserve-unknown-fields: true
type: object
taints:
- description: The list of the taints to be applied to the corresponding
- Node in additive manner. This list will not overwrite any other
- taints added to the Node on an ongoing basis by other entities.
- These taints should be actively reconciled e.g. if you ask the machine
- controller to apply a taint and then manually remove the taint the
- machine controller will put it back) but not have the machine controller
+ description: |-
+ The list of the taints to be applied to the corresponding Node in additive
+ manner. This list will not overwrite any other taints added to the Node on
+ an ongoing basis by other entities. These taints should be actively reconciled
+ e.g. if you ask the machine controller to apply a taint and then manually remove
+ the taint the machine controller will put it back) but not have the machine controller
remove any taints
items:
- description: The node this Taint is attached to has the "effect"
- on any pod that does not tolerate the Taint.
+ description: |-
+ The node this Taint is attached to has the "effect" on
+ any pod that does not tolerate the Taint.
properties:
effect:
- description: Required. The effect of the taint on pods that
- do not tolerate the taint. Valid effects are NoSchedule, PreferNoSchedule
- and NoExecute.
+ description: |-
+ Required. The effect of the taint on pods
+ that do not tolerate the taint.
+ Valid effects are NoSchedule, PreferNoSchedule and NoExecute.
type: string
key:
description: Required. The taint key to be applied to a node.
type: string
timeAdded:
- description: TimeAdded represents the time at which the taint
- was added. It is only written for NoExecute taints.
+ description: |-
+ TimeAdded represents the time at which the taint was added.
+ It is only written for NoExecute taints.
format: date-time
type: string
value:
@@ -344,39 +371,41 @@ spec:
operational state.
properties:
lastTransitionTime:
- description: Last time the condition transitioned from one status
- to another. This should be when the underlying condition changed.
- If that is not known, then using the time when the API field
- changed is acceptable.
+ description: |-
+ Last time the condition transitioned from one status to another.
+ This should be when the underlying condition changed. If that is not known, then using the time when
+ the API field changed is acceptable.
format: date-time
type: string
message:
- description: A human readable message indicating details about
- the transition. This field may be empty.
+ description: |-
+ A human readable message indicating details about the transition.
+ This field may be empty.
type: string
reason:
- description: The reason for the condition's last transition
- in CamelCase. The specific API may choose whether or not this
- field is considered a guaranteed API. This field may not be
- empty.
+ description: |-
+ The reason for the condition's last transition in CamelCase.
+ The specific API may choose whether or not this field is considered a guaranteed API.
+ This field may not be empty.
type: string
severity:
- description: Severity provides an explicit classification of
- Reason code, so the users or machines can immediately understand
- the current situation and act accordingly. The Severity field
- MUST be set only when Status=False.
+ description: |-
+ Severity provides an explicit classification of Reason code, so the users or machines can immediately
+ understand the current situation and act accordingly.
+ The Severity field MUST be set only when Status=False.
type: string
status:
description: Status of the condition, one of True, False, Unknown.
type: string
type:
- description: Type of condition in CamelCase or in foo.example.com/CamelCase.
- Many .condition.type values are consistent across resources
- like Available, but because arbitrary conditions can be useful
- (see .node.status.conditions), the ability to deconflict is
- important.
+ description: |-
+ Type of condition in CamelCase or in foo.example.com/CamelCase.
+ Many .condition.type values are consistent across resources like Available, but because arbitrary conditions
+ can be useful (see .node.status.conditions), the ability to deconflict is important.
type: string
required:
+ - lastTransitionTime
+ - status
- type
type: object
type: array
@@ -384,41 +413,49 @@ spec:
- type
x-kubernetes-list-type: map
errorMessage:
- description: "ErrorMessage will be set in the event that there is
- a terminal problem reconciling the Machine and will contain a more
- verbose string suitable for logging and human consumption. \n This
- field should not be set for transitive errors that a controller
- faces that are expected to be fixed automatically over time (like
- service outages), but instead indicate that something is fundamentally
- wrong with the Machine's spec or the configuration of the controller,
- and that manual intervention is required. Examples of terminal errors
- would be invalid combinations of settings in the spec, values that
- are unsupported by the controller, or the responsible controller
- itself being critically misconfigured. \n Any transient errors that
- occur during the reconciliation of Machines can be added as events
- to the Machine object and/or logged in the controller's output."
+ description: |-
+ ErrorMessage will be set in the event that there is a terminal problem
+ reconciling the Machine and will contain a more verbose string suitable
+ for logging and human consumption.
+
+ This field should not be set for transitive errors that a controller
+ faces that are expected to be fixed automatically over
+ time (like service outages), but instead indicate that something is
+ fundamentally wrong with the Machine's spec or the configuration of
+ the controller, and that manual intervention is required. Examples
+ of terminal errors would be invalid combinations of settings in the
+ spec, values that are unsupported by the controller, or the
+ responsible controller itself being critically misconfigured.
+
+ Any transient errors that occur during the reconciliation of Machines
+ can be added as events to the Machine object and/or logged in the
+ controller's output.
type: string
errorReason:
- description: "ErrorReason will be set in the event that there is a
- terminal problem reconciling the Machine and will contain a succinct
- value suitable for machine interpretation. \n This field should
- not be set for transitive errors that a controller faces that are
- expected to be fixed automatically over time (like service outages),
- but instead indicate that something is fundamentally wrong with
- the Machine's spec or the configuration of the controller, and that
- manual intervention is required. Examples of terminal errors would
- be invalid combinations of settings in the spec, values that are
- unsupported by the controller, or the responsible controller itself
- being critically misconfigured. \n Any transient errors that occur
- during the reconciliation of Machines can be added as events to
- the Machine object and/or logged in the controller's output."
+ description: |-
+ ErrorReason will be set in the event that there is a terminal problem
+ reconciling the Machine and will contain a succinct value suitable
+ for machine interpretation.
+
+ This field should not be set for transitive errors that a controller
+ faces that are expected to be fixed automatically over
+ time (like service outages), but instead indicate that something is
+ fundamentally wrong with the Machine's spec or the configuration of
+ the controller, and that manual intervention is required. Examples
+ of terminal errors would be invalid combinations of settings in the
+ spec, values that are unsupported by the controller, or the
+ responsible controller itself being critically misconfigured.
+
+ Any transient errors that occur during the reconciliation of Machines
+ can be added as events to the Machine object and/or logged in the
+ controller's output.
type: string
lastOperation:
- description: LastOperation describes the last-operation performed
- by the machine-controller. This API should be useful as a history
- in terms of the latest operation performed on the specific machine.
- It should also convey the state of the latest-operation for example
- if it is still on-going, failed or completed successfully.
+ description: |-
+ LastOperation describes the last-operation performed by the machine-controller.
+ This API should be useful as a history in terms of the latest operation performed on the
+ specific machine. It should also convey the state of the latest-operation for example if
+ it is still on-going, failed or completed successfully.
properties:
description:
description: Description is the human-readable description of
@@ -430,11 +467,13 @@ spec:
format: date-time
type: string
state:
- description: State is the current status of the last performed
- operation. E.g. Processing, Failed, Successful etc
+ description: |-
+ State is the current status of the last performed operation.
+ E.g. Processing, Failed, Successful etc
type: string
type:
- description: Type is the type of operation which was last performed.
+ description: |-
+ Type is the type of operation which was last performed.
E.g. Create, Delete, Update etc
type: string
type: object
@@ -449,44 +488,53 @@ spec:
description: API version of the referent.
type: string
fieldPath:
- description: 'If referring to a piece of an object instead of
- an entire object, this string should contain a valid JSON/Go
- field access statement, such as desiredState.manifest.containers[2].
- For example, if the object reference is to a container within
- a pod, this would take on a value like: "spec.containers{name}"
- (where "name" refers to the name of the container that triggered
- the event) or if no container name is specified "spec.containers[2]"
- (container with index 2 in this pod). This syntax is chosen
- only to have some well-defined way of referencing a part of
- an object. TODO: this design is not final and this field is
- subject to change in the future.'
+ description: |-
+ If referring to a piece of an object instead of an entire object, this string
+ should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
+ For example, if the object reference is to a container within a pod, this would take on a value like:
+ "spec.containers{name}" (where "name" refers to the name of the container that triggered
+ the event) or if no container name is specified "spec.containers[2]" (container with
+ index 2 in this pod). This syntax is chosen only to have some well-defined way of
+ referencing a part of an object.
type: string
kind:
- description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind of the referent.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
- description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
+ description: |-
+ Name of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
type: string
namespace:
- description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
+ description: |-
+ Namespace of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
type: string
resourceVersion:
- description: 'Specific resourceVersion to which this reference
- is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency'
+ description: |-
+ Specific resourceVersion to which this reference is made, if any.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
type: string
uid:
- description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids'
+ description: |-
+ UID of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
type: string
type: object
x-kubernetes-map-type: atomic
phase:
- description: 'Phase represents the current phase of machine actuation.
- One of: Failed, Provisioning, Provisioned, Running, Deleting'
+ description: |-
+ Phase represents the current phase of machine actuation.
+ One of: Failed, Provisioning, Provisioned, Running, Deleting
type: string
providerStatus:
- description: ProviderStatus details a Provider-specific status. It
- is recommended that providers maintain their own versioned API types
- that should be serialized/deserialized from this field.
+ description: |-
+ ProviderStatus details a Provider-specific status.
+ It is recommended that providers maintain their
+ own versioned API types that should be
+ serialized/deserialized from this field.
type: object
x-kubernetes-preserve-unknown-fields: true
type: object
diff --git a/vendor/github.com/openshift/api/machine/v1beta1/zz_generated.crd-manifests/0000_10_machine-api_01_machines-DevPreviewNoUpgrade.crd.yaml b/vendor/github.com/openshift/api/machine/v1beta1/zz_generated.crd-manifests/0000_10_machine-api_01_machines-DevPreviewNoUpgrade.crd.yaml
index 24029627c71e3a39baeb3d4b1af2644e3975ca84..5d6070f8f52cc456d77506ee33e4082c791bcb9e 100644
--- a/vendor/github.com/openshift/api/machine/v1beta1/zz_generated.crd-manifests/0000_10_machine-api_01_machines-DevPreviewNoUpgrade.crd.yaml
+++ b/vendor/github.com/openshift/api/machine/v1beta1/zz_generated.crd-manifests/0000_10_machine-api_01_machines-DevPreviewNoUpgrade.crd.yaml
@@ -57,19 +57,24 @@ spec:
name: v1beta1
schema:
openAPIV3Schema:
- description: 'Machine is the Schema for the machines API Compatibility level
- 2: Stable within a major release for a minimum of 9 months or 3 minor releases
- (whichever is longer).'
+ description: |-
+ Machine is the Schema for the machines API
+ Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -77,31 +82,34 @@ spec:
description: MachineSpec defines the desired state of Machine
properties:
lifecycleHooks:
- description: LifecycleHooks allow users to pause operations on the
- machine at certain predefined points within the machine lifecycle.
+ description: |-
+ LifecycleHooks allow users to pause operations on the machine at
+ certain predefined points within the machine lifecycle.
properties:
preDrain:
- description: PreDrain hooks prevent the machine from being drained.
+ description: |-
+ PreDrain hooks prevent the machine from being drained.
This also blocks further lifecycle events, such as termination.
items:
description: LifecycleHook represents a single instance of a
lifecycle hook
properties:
name:
- description: Name defines a unique name for the lifcycle
- hook. The name should be unique and descriptive, ideally
- 1-3 words, in CamelCase or it may be namespaced, eg. foo.example.com/CamelCase.
- Names must be unique and should only be managed by a single
- entity.
+ description: |-
+ Name defines a unique name for the lifcycle hook.
+ The name should be unique and descriptive, ideally 1-3 words, in CamelCase or
+ it may be namespaced, eg. foo.example.com/CamelCase.
+ Names must be unique and should only be managed by a single entity.
maxLength: 256
minLength: 3
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
owner:
- description: Owner defines the owner of the lifecycle hook.
+ description: |-
+ Owner defines the owner of the lifecycle hook.
This should be descriptive enough so that users can identify
- who/what is responsible for blocking the lifecycle. This
- could be the name of a controller (e.g. clusteroperator/etcd)
+ who/what is responsible for blocking the lifecycle.
+ This could be the name of a controller (e.g. clusteroperator/etcd)
or an administrator managing the hook.
maxLength: 512
minLength: 3
@@ -115,28 +123,29 @@ spec:
- name
x-kubernetes-list-type: map
preTerminate:
- description: PreTerminate hooks prevent the machine from being
- terminated. PreTerminate hooks be actioned after the Machine
- has been drained.
+ description: |-
+ PreTerminate hooks prevent the machine from being terminated.
+ PreTerminate hooks be actioned after the Machine has been drained.
items:
description: LifecycleHook represents a single instance of a
lifecycle hook
properties:
name:
- description: Name defines a unique name for the lifcycle
- hook. The name should be unique and descriptive, ideally
- 1-3 words, in CamelCase or it may be namespaced, eg. foo.example.com/CamelCase.
- Names must be unique and should only be managed by a single
- entity.
+ description: |-
+ Name defines a unique name for the lifcycle hook.
+ The name should be unique and descriptive, ideally 1-3 words, in CamelCase or
+ it may be namespaced, eg. foo.example.com/CamelCase.
+ Names must be unique and should only be managed by a single entity.
maxLength: 256
minLength: 3
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
owner:
- description: Owner defines the owner of the lifecycle hook.
+ description: |-
+ Owner defines the owner of the lifecycle hook.
This should be descriptive enough so that users can identify
- who/what is responsible for blocking the lifecycle. This
- could be the name of a controller (e.g. clusteroperator/etcd)
+ who/what is responsible for blocking the lifecycle.
+ This could be the name of a controller (e.g. clusteroperator/etcd)
or an administrator managing the hook.
maxLength: 512
minLength: 3
@@ -151,94 +160,111 @@ spec:
x-kubernetes-list-type: map
type: object
metadata:
- description: ObjectMeta will autopopulate the Node created. Use this
- to indicate what labels, annotations, name prefix, etc., should
- be used when creating the Node.
+ description: |-
+ ObjectMeta will autopopulate the Node created. Use this to
+ indicate what labels, annotations, name prefix, etc., should be used
+ when creating the Node.
properties:
annotations:
additionalProperties:
type: string
- description: 'Annotations is an unstructured key value map stored
- with a resource that may be set by external tools to store and
- retrieve arbitrary metadata. They are not queryable and should
- be preserved when modifying objects. More info: http://kubernetes.io/docs/user-guide/annotations'
+ description: |-
+ Annotations is an unstructured key value map stored with a resource that may be
+ set by external tools to store and retrieve arbitrary metadata. They are not
+ queryable and should be preserved when modifying objects.
+ More info: http://kubernetes.io/docs/user-guide/annotations
type: object
generateName:
- description: "GenerateName is an optional prefix, used by the
- server, to generate a unique name ONLY IF the Name field has
- not been provided. If this field is used, the name returned
- to the client will be different than the name passed. This value
- will also be combined with a unique suffix. The provided value
- has the same validation rules as the Name field, and may be
- truncated by the length of the suffix required to make the value
- unique on the server. \n If this field is specified and the
- generated name exists, the server will NOT return a 409 - instead,
- it will either return 201 Created or 500 with Reason ServerTimeout
- indicating a unique name could not be found in the time allotted,
- and the client should retry (optionally after the time indicated
- in the Retry-After header). \n Applied only if Name is not specified.
- More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency"
+ description: |-
+ GenerateName is an optional prefix, used by the server, to generate a unique
+ name ONLY IF the Name field has not been provided.
+ If this field is used, the name returned to the client will be different
+ than the name passed. This value will also be combined with a unique suffix.
+ The provided value has the same validation rules as the Name field,
+ and may be truncated by the length of the suffix required to make the value
+ unique on the server.
+
+ If this field is specified and the generated name exists, the server will
+ NOT return a 409 - instead, it will either return 201 Created or 500 with Reason
+ ServerTimeout indicating a unique name could not be found in the time allotted, and the client
+ should retry (optionally after the time indicated in the Retry-After header).
+
+ Applied only if Name is not specified.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
type: string
labels:
additionalProperties:
type: string
- description: 'Map of string keys and values that can be used to
- organize and categorize (scope and select) objects. May match
- selectors of replication controllers and services. More info:
- http://kubernetes.io/docs/user-guide/labels'
+ description: |-
+ Map of string keys and values that can be used to organize and categorize
+ (scope and select) objects. May match selectors of replication controllers
+ and services.
+ More info: http://kubernetes.io/docs/user-guide/labels
type: object
name:
- description: 'Name must be unique within a namespace. Is required
- when creating resources, although some resources may allow a
- client to request the generation of an appropriate name automatically.
- Name is primarily intended for creation idempotence and configuration
- definition. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/identifiers#names'
+ description: |-
+ Name must be unique within a namespace. Is required when creating resources, although
+ some resources may allow a client to request the generation of an appropriate name
+ automatically. Name is primarily intended for creation idempotence and configuration
+ definition.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/identifiers#names
type: string
namespace:
- description: "Namespace defines the space within each name must
- be unique. An empty namespace is equivalent to the \"default\"
- namespace, but \"default\" is the canonical representation.
- Not all objects are required to be scoped to a namespace - the
- value of this field for those objects will be empty. \n Must
- be a DNS_LABEL. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/namespaces"
+ description: |-
+ Namespace defines the space within each name must be unique. An empty namespace is
+ equivalent to the "default" namespace, but "default" is the canonical representation.
+ Not all objects are required to be scoped to a namespace - the value of this field for
+ those objects will be empty.
+
+ Must be a DNS_LABEL.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/namespaces
type: string
ownerReferences:
- description: List of objects depended by this object. If ALL objects
- in the list have been deleted, this object will be garbage collected.
- If this object is managed by a controller, then an entry in
- this list will point to this controller, with the controller
- field set to true. There cannot be more than one managing controller.
+ description: |-
+ List of objects depended by this object. If ALL objects in the list have
+ been deleted, this object will be garbage collected. If this object is managed by a controller,
+ then an entry in this list will point to this controller, with the controller field set to true.
+ There cannot be more than one managing controller.
items:
- description: OwnerReference contains enough information to let
- you identify an owning object. An owning object must be in
- the same namespace as the dependent, or be cluster-scoped,
- so there is no namespace field.
+ description: |-
+ OwnerReference contains enough information to let you identify an owning
+ object. An owning object must be in the same namespace as the dependent, or
+ be cluster-scoped, so there is no namespace field.
properties:
apiVersion:
description: API version of the referent.
type: string
blockOwnerDeletion:
- description: If true, AND if the owner has the "foregroundDeletion"
- finalizer, then the owner cannot be deleted from the key-value
- store until this reference is removed. See https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
- for how the garbage collector interacts with this field
- and enforces the foreground deletion. Defaults to false.
- To set this field, a user needs "delete" permission of
- the owner, otherwise 422 (Unprocessable Entity) will be
- returned.
+ description: |-
+ If true, AND if the owner has the "foregroundDeletion" finalizer, then
+ the owner cannot be deleted from the key-value store until this
+ reference is removed.
+ See https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
+ for how the garbage collector interacts with this field and enforces the foreground deletion.
+ Defaults to false.
+ To set this field, a user needs "delete" permission of the owner,
+ otherwise 422 (Unprocessable Entity) will be returned.
type: boolean
controller:
description: If true, this reference points to the managing
controller.
type: boolean
kind:
- description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind of the referent.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
- description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names'
+ description: |-
+ Name of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names
type: string
uid:
- description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids'
+ description: |-
+ UID of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids
type: string
required:
- apiVersion
@@ -253,19 +279,16 @@ spec:
x-kubernetes-list-type: map
type: object
providerID:
- description: ProviderID is the identification ID of the machine provided
- by the provider. This field must match the provider ID as seen on
- the node object corresponding to this machine. This field is required
- by higher level consumers of cluster-api. Example use case is cluster
- autoscaler with cluster-api as provider. Clean-up logic in the autoscaler
- compares machines to nodes to find out machines at provider which
- could not get registered as Kubernetes nodes. With cluster-api as
- a generic out-of-tree provider for autoscaler, this field is required
- by autoscaler to be able to have a provider view of the list of
- machines. Another list of nodes is queried from the k8s apiserver
- and then a comparison is done to find out unregistered machines
- and are marked for delete. This field will be set by the actuators
- and consumed by higher level entities like autoscaler that will
+ description: |-
+ ProviderID is the identification ID of the machine provided by the provider.
+ This field must match the provider ID as seen on the node object corresponding to this machine.
+ This field is required by higher level consumers of cluster-api. Example use case is cluster autoscaler
+ with cluster-api as provider. Clean-up logic in the autoscaler compares machines to nodes to find out
+ machines at provider which could not get registered as Kubernetes nodes. With cluster-api as a
+ generic out-of-tree provider for autoscaler, this field is required by autoscaler to be
+ able to have a provider view of the list of machines. Another list of nodes is queried from the k8s apiserver
+ and then a comparison is done to find out unregistered machines and are marked for delete.
+ This field will be set by the actuators and consumed by higher level entities like autoscaler that will
be interfacing with cluster-api as generic provider.
type: string
providerSpec:
@@ -273,36 +296,40 @@ spec:
to use during node creation.
properties:
value:
- description: Value is an inlined, serialized representation of
- the resource configuration. It is recommended that providers
- maintain their own versioned API types that should be serialized/deserialized
- from this field, akin to component config.
+ description: |-
+ Value is an inlined, serialized representation of the resource
+ configuration. It is recommended that providers maintain their own
+ versioned API types that should be serialized/deserialized from this
+ field, akin to component config.
type: object
x-kubernetes-preserve-unknown-fields: true
type: object
taints:
- description: The list of the taints to be applied to the corresponding
- Node in additive manner. This list will not overwrite any other
- taints added to the Node on an ongoing basis by other entities.
- These taints should be actively reconciled e.g. if you ask the machine
- controller to apply a taint and then manually remove the taint the
- machine controller will put it back) but not have the machine controller
+ description: |-
+ The list of the taints to be applied to the corresponding Node in additive
+ manner. This list will not overwrite any other taints added to the Node on
+ an ongoing basis by other entities. These taints should be actively reconciled
+ e.g. if you ask the machine controller to apply a taint and then manually remove
+ the taint the machine controller will put it back) but not have the machine controller
remove any taints
items:
- description: The node this Taint is attached to has the "effect"
- on any pod that does not tolerate the Taint.
+ description: |-
+ The node this Taint is attached to has the "effect" on
+ any pod that does not tolerate the Taint.
properties:
effect:
- description: Required. The effect of the taint on pods that
- do not tolerate the taint. Valid effects are NoSchedule, PreferNoSchedule
- and NoExecute.
+ description: |-
+ Required. The effect of the taint on pods
+ that do not tolerate the taint.
+ Valid effects are NoSchedule, PreferNoSchedule and NoExecute.
type: string
key:
description: Required. The taint key to be applied to a node.
type: string
timeAdded:
- description: TimeAdded represents the time at which the taint
- was added. It is only written for NoExecute taints.
+ description: |-
+ TimeAdded represents the time at which the taint was added.
+ It is only written for NoExecute taints.
format: date-time
type: string
value:
@@ -344,39 +371,41 @@ spec:
operational state.
properties:
lastTransitionTime:
- description: Last time the condition transitioned from one status
- to another. This should be when the underlying condition changed.
- If that is not known, then using the time when the API field
- changed is acceptable.
+ description: |-
+ Last time the condition transitioned from one status to another.
+ This should be when the underlying condition changed. If that is not known, then using the time when
+ the API field changed is acceptable.
format: date-time
type: string
message:
- description: A human readable message indicating details about
- the transition. This field may be empty.
+ description: |-
+ A human readable message indicating details about the transition.
+ This field may be empty.
type: string
reason:
- description: The reason for the condition's last transition
- in CamelCase. The specific API may choose whether or not this
- field is considered a guaranteed API. This field may not be
- empty.
+ description: |-
+ The reason for the condition's last transition in CamelCase.
+ The specific API may choose whether or not this field is considered a guaranteed API.
+ This field may not be empty.
type: string
severity:
- description: Severity provides an explicit classification of
- Reason code, so the users or machines can immediately understand
- the current situation and act accordingly. The Severity field
- MUST be set only when Status=False.
+ description: |-
+ Severity provides an explicit classification of Reason code, so the users or machines can immediately
+ understand the current situation and act accordingly.
+ The Severity field MUST be set only when Status=False.
type: string
status:
description: Status of the condition, one of True, False, Unknown.
type: string
type:
- description: Type of condition in CamelCase or in foo.example.com/CamelCase.
- Many .condition.type values are consistent across resources
- like Available, but because arbitrary conditions can be useful
- (see .node.status.conditions), the ability to deconflict is
- important.
+ description: |-
+ Type of condition in CamelCase or in foo.example.com/CamelCase.
+ Many .condition.type values are consistent across resources like Available, but because arbitrary conditions
+ can be useful (see .node.status.conditions), the ability to deconflict is important.
type: string
required:
+ - lastTransitionTime
+ - status
- type
type: object
type: array
@@ -384,41 +413,49 @@ spec:
- type
x-kubernetes-list-type: map
errorMessage:
- description: "ErrorMessage will be set in the event that there is
- a terminal problem reconciling the Machine and will contain a more
- verbose string suitable for logging and human consumption. \n This
- field should not be set for transitive errors that a controller
- faces that are expected to be fixed automatically over time (like
- service outages), but instead indicate that something is fundamentally
- wrong with the Machine's spec or the configuration of the controller,
- and that manual intervention is required. Examples of terminal errors
- would be invalid combinations of settings in the spec, values that
- are unsupported by the controller, or the responsible controller
- itself being critically misconfigured. \n Any transient errors that
- occur during the reconciliation of Machines can be added as events
- to the Machine object and/or logged in the controller's output."
+ description: |-
+ ErrorMessage will be set in the event that there is a terminal problem
+ reconciling the Machine and will contain a more verbose string suitable
+ for logging and human consumption.
+
+ This field should not be set for transitive errors that a controller
+ faces that are expected to be fixed automatically over
+ time (like service outages), but instead indicate that something is
+ fundamentally wrong with the Machine's spec or the configuration of
+ the controller, and that manual intervention is required. Examples
+ of terminal errors would be invalid combinations of settings in the
+ spec, values that are unsupported by the controller, or the
+ responsible controller itself being critically misconfigured.
+
+ Any transient errors that occur during the reconciliation of Machines
+ can be added as events to the Machine object and/or logged in the
+ controller's output.
type: string
errorReason:
- description: "ErrorReason will be set in the event that there is a
- terminal problem reconciling the Machine and will contain a succinct
- value suitable for machine interpretation. \n This field should
- not be set for transitive errors that a controller faces that are
- expected to be fixed automatically over time (like service outages),
- but instead indicate that something is fundamentally wrong with
- the Machine's spec or the configuration of the controller, and that
- manual intervention is required. Examples of terminal errors would
- be invalid combinations of settings in the spec, values that are
- unsupported by the controller, or the responsible controller itself
- being critically misconfigured. \n Any transient errors that occur
- during the reconciliation of Machines can be added as events to
- the Machine object and/or logged in the controller's output."
+ description: |-
+ ErrorReason will be set in the event that there is a terminal problem
+ reconciling the Machine and will contain a succinct value suitable
+ for machine interpretation.
+
+ This field should not be set for transitive errors that a controller
+ faces that are expected to be fixed automatically over
+ time (like service outages), but instead indicate that something is
+ fundamentally wrong with the Machine's spec or the configuration of
+ the controller, and that manual intervention is required. Examples
+ of terminal errors would be invalid combinations of settings in the
+ spec, values that are unsupported by the controller, or the
+ responsible controller itself being critically misconfigured.
+
+ Any transient errors that occur during the reconciliation of Machines
+ can be added as events to the Machine object and/or logged in the
+ controller's output.
type: string
lastOperation:
- description: LastOperation describes the last-operation performed
- by the machine-controller. This API should be useful as a history
- in terms of the latest operation performed on the specific machine.
- It should also convey the state of the latest-operation for example
- if it is still on-going, failed or completed successfully.
+ description: |-
+ LastOperation describes the last-operation performed by the machine-controller.
+ This API should be useful as a history in terms of the latest operation performed on the
+ specific machine. It should also convey the state of the latest-operation for example if
+ it is still on-going, failed or completed successfully.
properties:
description:
description: Description is the human-readable description of
@@ -430,11 +467,13 @@ spec:
format: date-time
type: string
state:
- description: State is the current status of the last performed
- operation. E.g. Processing, Failed, Successful etc
+ description: |-
+ State is the current status of the last performed operation.
+ E.g. Processing, Failed, Successful etc
type: string
type:
- description: Type is the type of operation which was last performed.
+ description: |-
+ Type is the type of operation which was last performed.
E.g. Create, Delete, Update etc
type: string
type: object
@@ -449,44 +488,53 @@ spec:
description: API version of the referent.
type: string
fieldPath:
- description: 'If referring to a piece of an object instead of
- an entire object, this string should contain a valid JSON/Go
- field access statement, such as desiredState.manifest.containers[2].
- For example, if the object reference is to a container within
- a pod, this would take on a value like: "spec.containers{name}"
- (where "name" refers to the name of the container that triggered
- the event) or if no container name is specified "spec.containers[2]"
- (container with index 2 in this pod). This syntax is chosen
- only to have some well-defined way of referencing a part of
- an object. TODO: this design is not final and this field is
- subject to change in the future.'
+ description: |-
+ If referring to a piece of an object instead of an entire object, this string
+ should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
+ For example, if the object reference is to a container within a pod, this would take on a value like:
+ "spec.containers{name}" (where "name" refers to the name of the container that triggered
+ the event) or if no container name is specified "spec.containers[2]" (container with
+ index 2 in this pod). This syntax is chosen only to have some well-defined way of
+ referencing a part of an object.
type: string
kind:
- description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind of the referent.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
- description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
+ description: |-
+ Name of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
type: string
namespace:
- description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
+ description: |-
+ Namespace of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
type: string
resourceVersion:
- description: 'Specific resourceVersion to which this reference
- is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency'
+ description: |-
+ Specific resourceVersion to which this reference is made, if any.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
type: string
uid:
- description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids'
+ description: |-
+ UID of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
type: string
type: object
x-kubernetes-map-type: atomic
phase:
- description: 'Phase represents the current phase of machine actuation.
- One of: Failed, Provisioning, Provisioned, Running, Deleting'
+ description: |-
+ Phase represents the current phase of machine actuation.
+ One of: Failed, Provisioning, Provisioned, Running, Deleting
type: string
providerStatus:
- description: ProviderStatus details a Provider-specific status. It
- is recommended that providers maintain their own versioned API types
- that should be serialized/deserialized from this field.
+ description: |-
+ ProviderStatus details a Provider-specific status.
+ It is recommended that providers maintain their
+ own versioned API types that should be
+ serialized/deserialized from this field.
type: object
x-kubernetes-preserve-unknown-fields: true
type: object
diff --git a/vendor/github.com/openshift/api/machine/v1beta1/zz_generated.crd-manifests/0000_10_machine-api_01_machines-TechPreviewNoUpgrade.crd.yaml b/vendor/github.com/openshift/api/machine/v1beta1/zz_generated.crd-manifests/0000_10_machine-api_01_machines-TechPreviewNoUpgrade.crd.yaml
index f441da306d9c7f13d57be812c16af9e36d826b44..ca7cbe14eaba7965f32f2750ff02b46322c371c8 100644
--- a/vendor/github.com/openshift/api/machine/v1beta1/zz_generated.crd-manifests/0000_10_machine-api_01_machines-TechPreviewNoUpgrade.crd.yaml
+++ b/vendor/github.com/openshift/api/machine/v1beta1/zz_generated.crd-manifests/0000_10_machine-api_01_machines-TechPreviewNoUpgrade.crd.yaml
@@ -57,19 +57,24 @@ spec:
name: v1beta1
schema:
openAPIV3Schema:
- description: 'Machine is the Schema for the machines API Compatibility level
- 2: Stable within a major release for a minimum of 9 months or 3 minor releases
- (whichever is longer).'
+ description: |-
+ Machine is the Schema for the machines API
+ Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -77,31 +82,34 @@ spec:
description: MachineSpec defines the desired state of Machine
properties:
lifecycleHooks:
- description: LifecycleHooks allow users to pause operations on the
- machine at certain predefined points within the machine lifecycle.
+ description: |-
+ LifecycleHooks allow users to pause operations on the machine at
+ certain predefined points within the machine lifecycle.
properties:
preDrain:
- description: PreDrain hooks prevent the machine from being drained.
+ description: |-
+ PreDrain hooks prevent the machine from being drained.
This also blocks further lifecycle events, such as termination.
items:
description: LifecycleHook represents a single instance of a
lifecycle hook
properties:
name:
- description: Name defines a unique name for the lifcycle
- hook. The name should be unique and descriptive, ideally
- 1-3 words, in CamelCase or it may be namespaced, eg. foo.example.com/CamelCase.
- Names must be unique and should only be managed by a single
- entity.
+ description: |-
+ Name defines a unique name for the lifcycle hook.
+ The name should be unique and descriptive, ideally 1-3 words, in CamelCase or
+ it may be namespaced, eg. foo.example.com/CamelCase.
+ Names must be unique and should only be managed by a single entity.
maxLength: 256
minLength: 3
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
owner:
- description: Owner defines the owner of the lifecycle hook.
+ description: |-
+ Owner defines the owner of the lifecycle hook.
This should be descriptive enough so that users can identify
- who/what is responsible for blocking the lifecycle. This
- could be the name of a controller (e.g. clusteroperator/etcd)
+ who/what is responsible for blocking the lifecycle.
+ This could be the name of a controller (e.g. clusteroperator/etcd)
or an administrator managing the hook.
maxLength: 512
minLength: 3
@@ -115,28 +123,29 @@ spec:
- name
x-kubernetes-list-type: map
preTerminate:
- description: PreTerminate hooks prevent the machine from being
- terminated. PreTerminate hooks be actioned after the Machine
- has been drained.
+ description: |-
+ PreTerminate hooks prevent the machine from being terminated.
+ PreTerminate hooks be actioned after the Machine has been drained.
items:
description: LifecycleHook represents a single instance of a
lifecycle hook
properties:
name:
- description: Name defines a unique name for the lifcycle
- hook. The name should be unique and descriptive, ideally
- 1-3 words, in CamelCase or it may be namespaced, eg. foo.example.com/CamelCase.
- Names must be unique and should only be managed by a single
- entity.
+ description: |-
+ Name defines a unique name for the lifcycle hook.
+ The name should be unique and descriptive, ideally 1-3 words, in CamelCase or
+ it may be namespaced, eg. foo.example.com/CamelCase.
+ Names must be unique and should only be managed by a single entity.
maxLength: 256
minLength: 3
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
owner:
- description: Owner defines the owner of the lifecycle hook.
+ description: |-
+ Owner defines the owner of the lifecycle hook.
This should be descriptive enough so that users can identify
- who/what is responsible for blocking the lifecycle. This
- could be the name of a controller (e.g. clusteroperator/etcd)
+ who/what is responsible for blocking the lifecycle.
+ This could be the name of a controller (e.g. clusteroperator/etcd)
or an administrator managing the hook.
maxLength: 512
minLength: 3
@@ -151,94 +160,111 @@ spec:
x-kubernetes-list-type: map
type: object
metadata:
- description: ObjectMeta will autopopulate the Node created. Use this
- to indicate what labels, annotations, name prefix, etc., should
- be used when creating the Node.
+ description: |-
+ ObjectMeta will autopopulate the Node created. Use this to
+ indicate what labels, annotations, name prefix, etc., should be used
+ when creating the Node.
properties:
annotations:
additionalProperties:
type: string
- description: 'Annotations is an unstructured key value map stored
- with a resource that may be set by external tools to store and
- retrieve arbitrary metadata. They are not queryable and should
- be preserved when modifying objects. More info: http://kubernetes.io/docs/user-guide/annotations'
+ description: |-
+ Annotations is an unstructured key value map stored with a resource that may be
+ set by external tools to store and retrieve arbitrary metadata. They are not
+ queryable and should be preserved when modifying objects.
+ More info: http://kubernetes.io/docs/user-guide/annotations
type: object
generateName:
- description: "GenerateName is an optional prefix, used by the
- server, to generate a unique name ONLY IF the Name field has
- not been provided. If this field is used, the name returned
- to the client will be different than the name passed. This value
- will also be combined with a unique suffix. The provided value
- has the same validation rules as the Name field, and may be
- truncated by the length of the suffix required to make the value
- unique on the server. \n If this field is specified and the
- generated name exists, the server will NOT return a 409 - instead,
- it will either return 201 Created or 500 with Reason ServerTimeout
- indicating a unique name could not be found in the time allotted,
- and the client should retry (optionally after the time indicated
- in the Retry-After header). \n Applied only if Name is not specified.
- More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency"
+ description: |-
+ GenerateName is an optional prefix, used by the server, to generate a unique
+ name ONLY IF the Name field has not been provided.
+ If this field is used, the name returned to the client will be different
+ than the name passed. This value will also be combined with a unique suffix.
+ The provided value has the same validation rules as the Name field,
+ and may be truncated by the length of the suffix required to make the value
+ unique on the server.
+
+ If this field is specified and the generated name exists, the server will
+ NOT return a 409 - instead, it will either return 201 Created or 500 with Reason
+ ServerTimeout indicating a unique name could not be found in the time allotted, and the client
+ should retry (optionally after the time indicated in the Retry-After header).
+
+ Applied only if Name is not specified.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
type: string
labels:
additionalProperties:
type: string
- description: 'Map of string keys and values that can be used to
- organize and categorize (scope and select) objects. May match
- selectors of replication controllers and services. More info:
- http://kubernetes.io/docs/user-guide/labels'
+ description: |-
+ Map of string keys and values that can be used to organize and categorize
+ (scope and select) objects. May match selectors of replication controllers
+ and services.
+ More info: http://kubernetes.io/docs/user-guide/labels
type: object
name:
- description: 'Name must be unique within a namespace. Is required
- when creating resources, although some resources may allow a
- client to request the generation of an appropriate name automatically.
- Name is primarily intended for creation idempotence and configuration
- definition. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/identifiers#names'
+ description: |-
+ Name must be unique within a namespace. Is required when creating resources, although
+ some resources may allow a client to request the generation of an appropriate name
+ automatically. Name is primarily intended for creation idempotence and configuration
+ definition.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/identifiers#names
type: string
namespace:
- description: "Namespace defines the space within each name must
- be unique. An empty namespace is equivalent to the \"default\"
- namespace, but \"default\" is the canonical representation.
- Not all objects are required to be scoped to a namespace - the
- value of this field for those objects will be empty. \n Must
- be a DNS_LABEL. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/namespaces"
+ description: |-
+ Namespace defines the space within each name must be unique. An empty namespace is
+ equivalent to the "default" namespace, but "default" is the canonical representation.
+ Not all objects are required to be scoped to a namespace - the value of this field for
+ those objects will be empty.
+
+ Must be a DNS_LABEL.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/namespaces
type: string
ownerReferences:
- description: List of objects depended by this object. If ALL objects
- in the list have been deleted, this object will be garbage collected.
- If this object is managed by a controller, then an entry in
- this list will point to this controller, with the controller
- field set to true. There cannot be more than one managing controller.
+ description: |-
+ List of objects depended by this object. If ALL objects in the list have
+ been deleted, this object will be garbage collected. If this object is managed by a controller,
+ then an entry in this list will point to this controller, with the controller field set to true.
+ There cannot be more than one managing controller.
items:
- description: OwnerReference contains enough information to let
- you identify an owning object. An owning object must be in
- the same namespace as the dependent, or be cluster-scoped,
- so there is no namespace field.
+ description: |-
+ OwnerReference contains enough information to let you identify an owning
+ object. An owning object must be in the same namespace as the dependent, or
+ be cluster-scoped, so there is no namespace field.
properties:
apiVersion:
description: API version of the referent.
type: string
blockOwnerDeletion:
- description: If true, AND if the owner has the "foregroundDeletion"
- finalizer, then the owner cannot be deleted from the key-value
- store until this reference is removed. See https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
- for how the garbage collector interacts with this field
- and enforces the foreground deletion. Defaults to false.
- To set this field, a user needs "delete" permission of
- the owner, otherwise 422 (Unprocessable Entity) will be
- returned.
+ description: |-
+ If true, AND if the owner has the "foregroundDeletion" finalizer, then
+ the owner cannot be deleted from the key-value store until this
+ reference is removed.
+ See https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
+ for how the garbage collector interacts with this field and enforces the foreground deletion.
+ Defaults to false.
+ To set this field, a user needs "delete" permission of the owner,
+ otherwise 422 (Unprocessable Entity) will be returned.
type: boolean
controller:
description: If true, this reference points to the managing
controller.
type: boolean
kind:
- description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind of the referent.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
- description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names'
+ description: |-
+ Name of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names
type: string
uid:
- description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids'
+ description: |-
+ UID of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids
type: string
required:
- apiVersion
@@ -253,19 +279,16 @@ spec:
x-kubernetes-list-type: map
type: object
providerID:
- description: ProviderID is the identification ID of the machine provided
- by the provider. This field must match the provider ID as seen on
- the node object corresponding to this machine. This field is required
- by higher level consumers of cluster-api. Example use case is cluster
- autoscaler with cluster-api as provider. Clean-up logic in the autoscaler
- compares machines to nodes to find out machines at provider which
- could not get registered as Kubernetes nodes. With cluster-api as
- a generic out-of-tree provider for autoscaler, this field is required
- by autoscaler to be able to have a provider view of the list of
- machines. Another list of nodes is queried from the k8s apiserver
- and then a comparison is done to find out unregistered machines
- and are marked for delete. This field will be set by the actuators
- and consumed by higher level entities like autoscaler that will
+ description: |-
+ ProviderID is the identification ID of the machine provided by the provider.
+ This field must match the provider ID as seen on the node object corresponding to this machine.
+ This field is required by higher level consumers of cluster-api. Example use case is cluster autoscaler
+ with cluster-api as provider. Clean-up logic in the autoscaler compares machines to nodes to find out
+ machines at provider which could not get registered as Kubernetes nodes. With cluster-api as a
+ generic out-of-tree provider for autoscaler, this field is required by autoscaler to be
+ able to have a provider view of the list of machines. Another list of nodes is queried from the k8s apiserver
+ and then a comparison is done to find out unregistered machines and are marked for delete.
+ This field will be set by the actuators and consumed by higher level entities like autoscaler that will
be interfacing with cluster-api as generic provider.
type: string
providerSpec:
@@ -273,36 +296,40 @@ spec:
to use during node creation.
properties:
value:
- description: Value is an inlined, serialized representation of
- the resource configuration. It is recommended that providers
- maintain their own versioned API types that should be serialized/deserialized
- from this field, akin to component config.
+ description: |-
+ Value is an inlined, serialized representation of the resource
+ configuration. It is recommended that providers maintain their own
+ versioned API types that should be serialized/deserialized from this
+ field, akin to component config.
type: object
x-kubernetes-preserve-unknown-fields: true
type: object
taints:
- description: The list of the taints to be applied to the corresponding
- Node in additive manner. This list will not overwrite any other
- taints added to the Node on an ongoing basis by other entities.
- These taints should be actively reconciled e.g. if you ask the machine
- controller to apply a taint and then manually remove the taint the
- machine controller will put it back) but not have the machine controller
+ description: |-
+ The list of the taints to be applied to the corresponding Node in additive
+ manner. This list will not overwrite any other taints added to the Node on
+ an ongoing basis by other entities. These taints should be actively reconciled
+ e.g. if you ask the machine controller to apply a taint and then manually remove
+ the taint the machine controller will put it back) but not have the machine controller
remove any taints
items:
- description: The node this Taint is attached to has the "effect"
- on any pod that does not tolerate the Taint.
+ description: |-
+ The node this Taint is attached to has the "effect" on
+ any pod that does not tolerate the Taint.
properties:
effect:
- description: Required. The effect of the taint on pods that
- do not tolerate the taint. Valid effects are NoSchedule, PreferNoSchedule
- and NoExecute.
+ description: |-
+ Required. The effect of the taint on pods
+ that do not tolerate the taint.
+ Valid effects are NoSchedule, PreferNoSchedule and NoExecute.
type: string
key:
description: Required. The taint key to be applied to a node.
type: string
timeAdded:
- description: TimeAdded represents the time at which the taint
- was added. It is only written for NoExecute taints.
+ description: |-
+ TimeAdded represents the time at which the taint was added.
+ It is only written for NoExecute taints.
format: date-time
type: string
value:
@@ -344,39 +371,41 @@ spec:
operational state.
properties:
lastTransitionTime:
- description: Last time the condition transitioned from one status
- to another. This should be when the underlying condition changed.
- If that is not known, then using the time when the API field
- changed is acceptable.
+ description: |-
+ Last time the condition transitioned from one status to another.
+ This should be when the underlying condition changed. If that is not known, then using the time when
+ the API field changed is acceptable.
format: date-time
type: string
message:
- description: A human readable message indicating details about
- the transition. This field may be empty.
+ description: |-
+ A human readable message indicating details about the transition.
+ This field may be empty.
type: string
reason:
- description: The reason for the condition's last transition
- in CamelCase. The specific API may choose whether or not this
- field is considered a guaranteed API. This field may not be
- empty.
+ description: |-
+ The reason for the condition's last transition in CamelCase.
+ The specific API may choose whether or not this field is considered a guaranteed API.
+ This field may not be empty.
type: string
severity:
- description: Severity provides an explicit classification of
- Reason code, so the users or machines can immediately understand
- the current situation and act accordingly. The Severity field
- MUST be set only when Status=False.
+ description: |-
+ Severity provides an explicit classification of Reason code, so the users or machines can immediately
+ understand the current situation and act accordingly.
+ The Severity field MUST be set only when Status=False.
type: string
status:
description: Status of the condition, one of True, False, Unknown.
type: string
type:
- description: Type of condition in CamelCase or in foo.example.com/CamelCase.
- Many .condition.type values are consistent across resources
- like Available, but because arbitrary conditions can be useful
- (see .node.status.conditions), the ability to deconflict is
- important.
+ description: |-
+ Type of condition in CamelCase or in foo.example.com/CamelCase.
+ Many .condition.type values are consistent across resources like Available, but because arbitrary conditions
+ can be useful (see .node.status.conditions), the ability to deconflict is important.
type: string
required:
+ - lastTransitionTime
+ - status
- type
type: object
type: array
@@ -384,41 +413,49 @@ spec:
- type
x-kubernetes-list-type: map
errorMessage:
- description: "ErrorMessage will be set in the event that there is
- a terminal problem reconciling the Machine and will contain a more
- verbose string suitable for logging and human consumption. \n This
- field should not be set for transitive errors that a controller
- faces that are expected to be fixed automatically over time (like
- service outages), but instead indicate that something is fundamentally
- wrong with the Machine's spec or the configuration of the controller,
- and that manual intervention is required. Examples of terminal errors
- would be invalid combinations of settings in the spec, values that
- are unsupported by the controller, or the responsible controller
- itself being critically misconfigured. \n Any transient errors that
- occur during the reconciliation of Machines can be added as events
- to the Machine object and/or logged in the controller's output."
+ description: |-
+ ErrorMessage will be set in the event that there is a terminal problem
+ reconciling the Machine and will contain a more verbose string suitable
+ for logging and human consumption.
+
+ This field should not be set for transitive errors that a controller
+ faces that are expected to be fixed automatically over
+ time (like service outages), but instead indicate that something is
+ fundamentally wrong with the Machine's spec or the configuration of
+ the controller, and that manual intervention is required. Examples
+ of terminal errors would be invalid combinations of settings in the
+ spec, values that are unsupported by the controller, or the
+ responsible controller itself being critically misconfigured.
+
+ Any transient errors that occur during the reconciliation of Machines
+ can be added as events to the Machine object and/or logged in the
+ controller's output.
type: string
errorReason:
- description: "ErrorReason will be set in the event that there is a
- terminal problem reconciling the Machine and will contain a succinct
- value suitable for machine interpretation. \n This field should
- not be set for transitive errors that a controller faces that are
- expected to be fixed automatically over time (like service outages),
- but instead indicate that something is fundamentally wrong with
- the Machine's spec or the configuration of the controller, and that
- manual intervention is required. Examples of terminal errors would
- be invalid combinations of settings in the spec, values that are
- unsupported by the controller, or the responsible controller itself
- being critically misconfigured. \n Any transient errors that occur
- during the reconciliation of Machines can be added as events to
- the Machine object and/or logged in the controller's output."
+ description: |-
+ ErrorReason will be set in the event that there is a terminal problem
+ reconciling the Machine and will contain a succinct value suitable
+ for machine interpretation.
+
+ This field should not be set for transitive errors that a controller
+ faces that are expected to be fixed automatically over
+ time (like service outages), but instead indicate that something is
+ fundamentally wrong with the Machine's spec or the configuration of
+ the controller, and that manual intervention is required. Examples
+ of terminal errors would be invalid combinations of settings in the
+ spec, values that are unsupported by the controller, or the
+ responsible controller itself being critically misconfigured.
+
+ Any transient errors that occur during the reconciliation of Machines
+ can be added as events to the Machine object and/or logged in the
+ controller's output.
type: string
lastOperation:
- description: LastOperation describes the last-operation performed
- by the machine-controller. This API should be useful as a history
- in terms of the latest operation performed on the specific machine.
- It should also convey the state of the latest-operation for example
- if it is still on-going, failed or completed successfully.
+ description: |-
+ LastOperation describes the last-operation performed by the machine-controller.
+ This API should be useful as a history in terms of the latest operation performed on the
+ specific machine. It should also convey the state of the latest-operation for example if
+ it is still on-going, failed or completed successfully.
properties:
description:
description: Description is the human-readable description of
@@ -430,11 +467,13 @@ spec:
format: date-time
type: string
state:
- description: State is the current status of the last performed
- operation. E.g. Processing, Failed, Successful etc
+ description: |-
+ State is the current status of the last performed operation.
+ E.g. Processing, Failed, Successful etc
type: string
type:
- description: Type is the type of operation which was last performed.
+ description: |-
+ Type is the type of operation which was last performed.
E.g. Create, Delete, Update etc
type: string
type: object
@@ -449,44 +488,53 @@ spec:
description: API version of the referent.
type: string
fieldPath:
- description: 'If referring to a piece of an object instead of
- an entire object, this string should contain a valid JSON/Go
- field access statement, such as desiredState.manifest.containers[2].
- For example, if the object reference is to a container within
- a pod, this would take on a value like: "spec.containers{name}"
- (where "name" refers to the name of the container that triggered
- the event) or if no container name is specified "spec.containers[2]"
- (container with index 2 in this pod). This syntax is chosen
- only to have some well-defined way of referencing a part of
- an object. TODO: this design is not final and this field is
- subject to change in the future.'
+ description: |-
+ If referring to a piece of an object instead of an entire object, this string
+ should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
+ For example, if the object reference is to a container within a pod, this would take on a value like:
+ "spec.containers{name}" (where "name" refers to the name of the container that triggered
+ the event) or if no container name is specified "spec.containers[2]" (container with
+ index 2 in this pod). This syntax is chosen only to have some well-defined way of
+ referencing a part of an object.
type: string
kind:
- description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind of the referent.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
- description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
+ description: |-
+ Name of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
type: string
namespace:
- description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
+ description: |-
+ Namespace of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
type: string
resourceVersion:
- description: 'Specific resourceVersion to which this reference
- is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency'
+ description: |-
+ Specific resourceVersion to which this reference is made, if any.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
type: string
uid:
- description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids'
+ description: |-
+ UID of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
type: string
type: object
x-kubernetes-map-type: atomic
phase:
- description: 'Phase represents the current phase of machine actuation.
- One of: Failed, Provisioning, Provisioned, Running, Deleting'
+ description: |-
+ Phase represents the current phase of machine actuation.
+ One of: Failed, Provisioning, Provisioned, Running, Deleting
type: string
providerStatus:
- description: ProviderStatus details a Provider-specific status. It
- is recommended that providers maintain their own versioned API types
- that should be serialized/deserialized from this field.
+ description: |-
+ ProviderStatus details a Provider-specific status.
+ It is recommended that providers maintain their
+ own versioned API types that should be
+ serialized/deserialized from this field.
type: object
x-kubernetes-preserve-unknown-fields: true
type: object
diff --git a/vendor/github.com/openshift/api/machine/v1beta1/zz_generated.crd-manifests/0000_10_machine-api_01_machinesets-CustomNoUpgrade.crd.yaml b/vendor/github.com/openshift/api/machine/v1beta1/zz_generated.crd-manifests/0000_10_machine-api_01_machinesets-CustomNoUpgrade.crd.yaml
index 3841119fddcc96295f64ea7a234d737fa5ef81f4..48b77e0d955dc8be35c90aa9500607f0663da244 100644
--- a/vendor/github.com/openshift/api/machine/v1beta1/zz_generated.crd-manifests/0000_10_machine-api_01_machinesets-CustomNoUpgrade.crd.yaml
+++ b/vendor/github.com/openshift/api/machine/v1beta1/zz_generated.crd-manifests/0000_10_machine-api_01_machinesets-CustomNoUpgrade.crd.yaml
@@ -42,19 +42,24 @@ spec:
name: v1beta1
schema:
openAPIV3Schema:
- description: 'MachineSet ensures that a specified number of machines replicas
- are running at any given time. Compatibility level 2: Stable within a major
- release for a minimum of 9 months or 3 minor releases (whichever is longer).'
+ description: |-
+ MachineSet ensures that a specified number of machines replicas are running at any given time.
+ Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -62,73 +67,71 @@ spec:
description: MachineSetSpec defines the desired state of MachineSet
properties:
authoritativeAPI:
- description: authoritativeAPI is the API that is authoritative for
- this resource. Valid values are MachineAPI and ClusterAPI. When
- set to MachineAPI, writes to the spec of the machine.openshift.io
- copy of this resource will be reflected into the cluster.x-k8s.io
- copy. When set to ClusterAPI, writes to the spec of the cluster.x-k8s.io
- copy of this resource will be reflected into the machine.openshift.io
- copy. Updates to the status will be reflected in both copies of
- the resource, based on the controller implementing the functionality
- of the API. Currently the authoritative API determines which controller
- will manage the resource, this will change in a future release.
- To ensure the change has been accepted, please verify that the `status.authoritativeAPI`
- field has been updated to the desired value and that the `Synchronized`
- condition is present and set to `True`.
+ default: MachineAPI
+ description: |-
+ authoritativeAPI is the API that is authoritative for this resource.
+ Valid values are MachineAPI and ClusterAPI.
+ When set to MachineAPI, writes to the spec of the machine.openshift.io copy of this resource will be reflected into the cluster.x-k8s.io copy.
+ When set to ClusterAPI, writes to the spec of the cluster.x-k8s.io copy of this resource will be reflected into the machine.openshift.io copy.
+ Updates to the status will be reflected in both copies of the resource, based on the controller implementing the functionality of the API.
+ Currently the authoritative API determines which controller will manage the resource, this will change in a future release.
+ To ensure the change has been accepted, please verify that the `status.authoritativeAPI` field has been updated to the desired value and that the `Synchronized` condition is present and set to `True`.
enum:
- MachineAPI
- ClusterAPI
type: string
deletePolicy:
- description: DeletePolicy defines the policy used to identify nodes
- to delete when downscaling. Defaults to "Random". Valid values
- are "Random, "Newest", "Oldest"
+ description: |-
+ DeletePolicy defines the policy used to identify nodes to delete when downscaling.
+ Defaults to "Random". Valid values are "Random, "Newest", "Oldest"
enum:
- Random
- Newest
- Oldest
type: string
minReadySeconds:
- description: MinReadySeconds is the minimum number of seconds for
- which a newly created machine should be ready. Defaults to 0 (machine
- will be considered available as soon as it is ready)
+ description: |-
+ MinReadySeconds is the minimum number of seconds for which a newly created machine should be ready.
+ Defaults to 0 (machine will be considered available as soon as it is ready)
format: int32
type: integer
replicas:
default: 1
- description: Replicas is the number of desired replicas. This is a
- pointer to distinguish between explicit zero and unspecified. Defaults
- to 1.
+ description: |-
+ Replicas is the number of desired replicas.
+ This is a pointer to distinguish between explicit zero and unspecified.
+ Defaults to 1.
format: int32
type: integer
selector:
- description: 'Selector is a label query over machines that should
- match the replica count. Label keys and values that must match in
- order to be controlled by this MachineSet. It must match the machine
- template''s labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors'
+ description: |-
+ Selector is a label query over machines that should match the replica count.
+ Label keys and values that must match in order to be controlled by this MachineSet.
+ It must match the machine template's labels.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors
properties:
matchExpressions:
description: matchExpressions is a list of label selector requirements.
The requirements are ANDed.
items:
- description: A label selector requirement is a selector that
- contains values, a key, and an operator that relates the key
- and values.
+ description: |-
+ A label selector requirement is a selector that contains values, a key, and an operator that
+ relates the key and values.
properties:
key:
description: key is the label key that the selector applies
to.
type: string
operator:
- description: operator represents a key's relationship to
- a set of values. Valid operators are In, NotIn, Exists
- and DoesNotExist.
+ description: |-
+ operator represents a key's relationship to a set of values.
+ Valid operators are In, NotIn, Exists and DoesNotExist.
type: string
values:
- description: values is an array of string values. If the
- operator is In or NotIn, the values array must be non-empty.
- If the operator is Exists or DoesNotExist, the values
- array must be empty. This array is replaced during a strategic
+ description: |-
+ values is an array of string values. If the operator is In or NotIn,
+ the values array must be non-empty. If the operator is Exists or DoesNotExist,
+ the values array must be empty. This array is replaced during a strategic
merge patch.
items:
type: string
@@ -143,111 +146,123 @@ spec:
matchLabels:
additionalProperties:
type: string
- description: matchLabels is a map of {key,value} pairs. A single
- {key,value} in the matchLabels map is equivalent to an element
- of matchExpressions, whose key field is "key", the operator
- is "In", and the values array contains only "value". The requirements
- are ANDed.
+ description: |-
+ matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
+ map is equivalent to an element of matchExpressions, whose key field is "key", the
+ operator is "In", and the values array contains only "value". The requirements are ANDed.
type: object
type: object
x-kubernetes-map-type: atomic
template:
- description: Template is the object that describes the machine that
- will be created if insufficient replicas are detected.
+ description: |-
+ Template is the object that describes the machine that will be created if
+ insufficient replicas are detected.
properties:
metadata:
- description: 'Standard object''s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata'
+ description: |-
+ Standard object's metadata.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
properties:
annotations:
additionalProperties:
type: string
- description: 'Annotations is an unstructured key value map
- stored with a resource that may be set by external tools
- to store and retrieve arbitrary metadata. They are not queryable
- and should be preserved when modifying objects. More info:
- http://kubernetes.io/docs/user-guide/annotations'
+ description: |-
+ Annotations is an unstructured key value map stored with a resource that may be
+ set by external tools to store and retrieve arbitrary metadata. They are not
+ queryable and should be preserved when modifying objects.
+ More info: http://kubernetes.io/docs/user-guide/annotations
type: object
generateName:
- description: "GenerateName is an optional prefix, used by
- the server, to generate a unique name ONLY IF the Name field
- has not been provided. If this field is used, the name returned
- to the client will be different than the name passed. This
- value will also be combined with a unique suffix. The provided
- value has the same validation rules as the Name field, and
- may be truncated by the length of the suffix required to
- make the value unique on the server. \n If this field is
- specified and the generated name exists, the server will
- NOT return a 409 - instead, it will either return 201 Created
- or 500 with Reason ServerTimeout indicating a unique name
- could not be found in the time allotted, and the client
- should retry (optionally after the time indicated in the
- Retry-After header). \n Applied only if Name is not specified.
- More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency"
+ description: |-
+ GenerateName is an optional prefix, used by the server, to generate a unique
+ name ONLY IF the Name field has not been provided.
+ If this field is used, the name returned to the client will be different
+ than the name passed. This value will also be combined with a unique suffix.
+ The provided value has the same validation rules as the Name field,
+ and may be truncated by the length of the suffix required to make the value
+ unique on the server.
+
+ If this field is specified and the generated name exists, the server will
+ NOT return a 409 - instead, it will either return 201 Created or 500 with Reason
+ ServerTimeout indicating a unique name could not be found in the time allotted, and the client
+ should retry (optionally after the time indicated in the Retry-After header).
+
+ Applied only if Name is not specified.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
type: string
labels:
additionalProperties:
type: string
- description: 'Map of string keys and values that can be used
- to organize and categorize (scope and select) objects. May
- match selectors of replication controllers and services.
- More info: http://kubernetes.io/docs/user-guide/labels'
+ description: |-
+ Map of string keys and values that can be used to organize and categorize
+ (scope and select) objects. May match selectors of replication controllers
+ and services.
+ More info: http://kubernetes.io/docs/user-guide/labels
type: object
name:
- description: 'Name must be unique within a namespace. Is required
- when creating resources, although some resources may allow
- a client to request the generation of an appropriate name
- automatically. Name is primarily intended for creation idempotence
- and configuration definition. Cannot be updated. More info:
- http://kubernetes.io/docs/user-guide/identifiers#names'
+ description: |-
+ Name must be unique within a namespace. Is required when creating resources, although
+ some resources may allow a client to request the generation of an appropriate name
+ automatically. Name is primarily intended for creation idempotence and configuration
+ definition.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/identifiers#names
type: string
namespace:
- description: "Namespace defines the space within each name
- must be unique. An empty namespace is equivalent to the
- \"default\" namespace, but \"default\" is the canonical
- representation. Not all objects are required to be scoped
- to a namespace - the value of this field for those objects
- will be empty. \n Must be a DNS_LABEL. Cannot be updated.
- More info: http://kubernetes.io/docs/user-guide/namespaces"
+ description: |-
+ Namespace defines the space within each name must be unique. An empty namespace is
+ equivalent to the "default" namespace, but "default" is the canonical representation.
+ Not all objects are required to be scoped to a namespace - the value of this field for
+ those objects will be empty.
+
+ Must be a DNS_LABEL.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/namespaces
type: string
ownerReferences:
- description: List of objects depended by this object. If ALL
- objects in the list have been deleted, this object will
- be garbage collected. If this object is managed by a controller,
- then an entry in this list will point to this controller,
- with the controller field set to true. There cannot be more
- than one managing controller.
+ description: |-
+ List of objects depended by this object. If ALL objects in the list have
+ been deleted, this object will be garbage collected. If this object is managed by a controller,
+ then an entry in this list will point to this controller, with the controller field set to true.
+ There cannot be more than one managing controller.
items:
- description: OwnerReference contains enough information
- to let you identify an owning object. An owning object
- must be in the same namespace as the dependent, or be
- cluster-scoped, so there is no namespace field.
+ description: |-
+ OwnerReference contains enough information to let you identify an owning
+ object. An owning object must be in the same namespace as the dependent, or
+ be cluster-scoped, so there is no namespace field.
properties:
apiVersion:
description: API version of the referent.
type: string
blockOwnerDeletion:
- description: If true, AND if the owner has the "foregroundDeletion"
- finalizer, then the owner cannot be deleted from the
- key-value store until this reference is removed. See
- https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
- for how the garbage collector interacts with this
- field and enforces the foreground deletion. Defaults
- to false. To set this field, a user needs "delete"
- permission of the owner, otherwise 422 (Unprocessable
- Entity) will be returned.
+ description: |-
+ If true, AND if the owner has the "foregroundDeletion" finalizer, then
+ the owner cannot be deleted from the key-value store until this
+ reference is removed.
+ See https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
+ for how the garbage collector interacts with this field and enforces the foreground deletion.
+ Defaults to false.
+ To set this field, a user needs "delete" permission of the owner,
+ otherwise 422 (Unprocessable Entity) will be returned.
type: boolean
controller:
description: If true, this reference points to the managing
controller.
type: boolean
kind:
- description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind of the referent.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
- description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names'
+ description: |-
+ Name of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names
type: string
uid:
- description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids'
+ description: |-
+ UID of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids
type: string
required:
- apiVersion
@@ -262,59 +277,54 @@ spec:
x-kubernetes-list-type: map
type: object
spec:
- description: 'Specification of the desired behavior of the machine.
- More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status'
+ description: |-
+ Specification of the desired behavior of the machine.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
properties:
authoritativeAPI:
- description: authoritativeAPI is the API that is authoritative
- for this resource. Valid values are MachineAPI and ClusterAPI.
- When set to MachineAPI, writes to the spec of the machine.openshift.io
- copy of this resource will be reflected into the cluster.x-k8s.io
- copy. When set to ClusterAPI, writes to the spec of the
- cluster.x-k8s.io copy of this resource will be reflected
- into the machine.openshift.io copy. Updates to the status
- will be reflected in both copies of the resource, based
- on the controller implementing the functionality of the
- API. Currently the authoritative API determines which controller
- will manage the resource, this will change in a future release.
- To ensure the change has been accepted, please verify that
- the `status.authoritativeAPI` field has been updated to
- the desired value and that the `Synchronized` condition
- is present and set to `True`.
+ default: MachineAPI
+ description: |-
+ authoritativeAPI is the API that is authoritative for this resource.
+ Valid values are MachineAPI and ClusterAPI.
+ When set to MachineAPI, writes to the spec of the machine.openshift.io copy of this resource will be reflected into the cluster.x-k8s.io copy.
+ When set to ClusterAPI, writes to the spec of the cluster.x-k8s.io copy of this resource will be reflected into the machine.openshift.io copy.
+ Updates to the status will be reflected in both copies of the resource, based on the controller implementing the functionality of the API.
+ Currently the authoritative API determines which controller will manage the resource, this will change in a future release.
+ To ensure the change has been accepted, please verify that the `status.authoritativeAPI` field has been updated to the desired value and that the `Synchronized` condition is present and set to `True`.
enum:
- MachineAPI
- ClusterAPI
type: string
lifecycleHooks:
- description: LifecycleHooks allow users to pause operations
- on the machine at certain predefined points within the machine
- lifecycle.
+ description: |-
+ LifecycleHooks allow users to pause operations on the machine at
+ certain predefined points within the machine lifecycle.
properties:
preDrain:
- description: PreDrain hooks prevent the machine from being
- drained. This also blocks further lifecycle events,
- such as termination.
+ description: |-
+ PreDrain hooks prevent the machine from being drained.
+ This also blocks further lifecycle events, such as termination.
items:
description: LifecycleHook represents a single instance
of a lifecycle hook
properties:
name:
- description: Name defines a unique name for the
- lifcycle hook. The name should be unique and descriptive,
- ideally 1-3 words, in CamelCase or it may be namespaced,
- eg. foo.example.com/CamelCase. Names must be unique
- and should only be managed by a single entity.
+ description: |-
+ Name defines a unique name for the lifcycle hook.
+ The name should be unique and descriptive, ideally 1-3 words, in CamelCase or
+ it may be namespaced, eg. foo.example.com/CamelCase.
+ Names must be unique and should only be managed by a single entity.
maxLength: 256
minLength: 3
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
owner:
- description: Owner defines the owner of the lifecycle
- hook. This should be descriptive enough so that
- users can identify who/what is responsible for
- blocking the lifecycle. This could be the name
- of a controller (e.g. clusteroperator/etcd) or
- an administrator managing the hook.
+ description: |-
+ Owner defines the owner of the lifecycle hook.
+ This should be descriptive enough so that users can identify
+ who/what is responsible for blocking the lifecycle.
+ This could be the name of a controller (e.g. clusteroperator/etcd)
+ or an administrator managing the hook.
maxLength: 512
minLength: 3
type: string
@@ -327,30 +337,30 @@ spec:
- name
x-kubernetes-list-type: map
preTerminate:
- description: PreTerminate hooks prevent the machine from
- being terminated. PreTerminate hooks be actioned after
- the Machine has been drained.
+ description: |-
+ PreTerminate hooks prevent the machine from being terminated.
+ PreTerminate hooks be actioned after the Machine has been drained.
items:
description: LifecycleHook represents a single instance
of a lifecycle hook
properties:
name:
- description: Name defines a unique name for the
- lifcycle hook. The name should be unique and descriptive,
- ideally 1-3 words, in CamelCase or it may be namespaced,
- eg. foo.example.com/CamelCase. Names must be unique
- and should only be managed by a single entity.
+ description: |-
+ Name defines a unique name for the lifcycle hook.
+ The name should be unique and descriptive, ideally 1-3 words, in CamelCase or
+ it may be namespaced, eg. foo.example.com/CamelCase.
+ Names must be unique and should only be managed by a single entity.
maxLength: 256
minLength: 3
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
owner:
- description: Owner defines the owner of the lifecycle
- hook. This should be descriptive enough so that
- users can identify who/what is responsible for
- blocking the lifecycle. This could be the name
- of a controller (e.g. clusteroperator/etcd) or
- an administrator managing the hook.
+ description: |-
+ Owner defines the owner of the lifecycle hook.
+ This should be descriptive enough so that users can identify
+ who/what is responsible for blocking the lifecycle.
+ This could be the name of a controller (e.g. clusteroperator/etcd)
+ or an administrator managing the hook.
maxLength: 512
minLength: 3
type: string
@@ -364,101 +374,111 @@ spec:
x-kubernetes-list-type: map
type: object
metadata:
- description: ObjectMeta will autopopulate the Node created.
- Use this to indicate what labels, annotations, name prefix,
- etc., should be used when creating the Node.
+ description: |-
+ ObjectMeta will autopopulate the Node created. Use this to
+ indicate what labels, annotations, name prefix, etc., should be used
+ when creating the Node.
properties:
annotations:
additionalProperties:
type: string
- description: 'Annotations is an unstructured key value
- map stored with a resource that may be set by external
- tools to store and retrieve arbitrary metadata. They
- are not queryable and should be preserved when modifying
- objects. More info: http://kubernetes.io/docs/user-guide/annotations'
+ description: |-
+ Annotations is an unstructured key value map stored with a resource that may be
+ set by external tools to store and retrieve arbitrary metadata. They are not
+ queryable and should be preserved when modifying objects.
+ More info: http://kubernetes.io/docs/user-guide/annotations
type: object
generateName:
- description: "GenerateName is an optional prefix, used
- by the server, to generate a unique name ONLY IF the
- Name field has not been provided. If this field is used,
- the name returned to the client will be different than
- the name passed. This value will also be combined with
- a unique suffix. The provided value has the same validation
- rules as the Name field, and may be truncated by the
- length of the suffix required to make the value unique
- on the server. \n If this field is specified and the
- generated name exists, the server will NOT return a
- 409 - instead, it will either return 201 Created or
- 500 with Reason ServerTimeout indicating a unique name
- could not be found in the time allotted, and the client
- should retry (optionally after the time indicated in
- the Retry-After header). \n Applied only if Name is
- not specified. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency"
+ description: |-
+ GenerateName is an optional prefix, used by the server, to generate a unique
+ name ONLY IF the Name field has not been provided.
+ If this field is used, the name returned to the client will be different
+ than the name passed. This value will also be combined with a unique suffix.
+ The provided value has the same validation rules as the Name field,
+ and may be truncated by the length of the suffix required to make the value
+ unique on the server.
+
+ If this field is specified and the generated name exists, the server will
+ NOT return a 409 - instead, it will either return 201 Created or 500 with Reason
+ ServerTimeout indicating a unique name could not be found in the time allotted, and the client
+ should retry (optionally after the time indicated in the Retry-After header).
+
+ Applied only if Name is not specified.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
type: string
labels:
additionalProperties:
type: string
- description: 'Map of string keys and values that can be
- used to organize and categorize (scope and select) objects.
- May match selectors of replication controllers and services.
- More info: http://kubernetes.io/docs/user-guide/labels'
+ description: |-
+ Map of string keys and values that can be used to organize and categorize
+ (scope and select) objects. May match selectors of replication controllers
+ and services.
+ More info: http://kubernetes.io/docs/user-guide/labels
type: object
name:
- description: 'Name must be unique within a namespace.
- Is required when creating resources, although some resources
- may allow a client to request the generation of an appropriate
- name automatically. Name is primarily intended for creation
- idempotence and configuration definition. Cannot be
- updated. More info: http://kubernetes.io/docs/user-guide/identifiers#names'
+ description: |-
+ Name must be unique within a namespace. Is required when creating resources, although
+ some resources may allow a client to request the generation of an appropriate name
+ automatically. Name is primarily intended for creation idempotence and configuration
+ definition.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/identifiers#names
type: string
namespace:
- description: "Namespace defines the space within each
- name must be unique. An empty namespace is equivalent
- to the \"default\" namespace, but \"default\" is the
- canonical representation. Not all objects are required
- to be scoped to a namespace - the value of this field
- for those objects will be empty. \n Must be a DNS_LABEL.
- Cannot be updated. More info: http://kubernetes.io/docs/user-guide/namespaces"
+ description: |-
+ Namespace defines the space within each name must be unique. An empty namespace is
+ equivalent to the "default" namespace, but "default" is the canonical representation.
+ Not all objects are required to be scoped to a namespace - the value of this field for
+ those objects will be empty.
+
+ Must be a DNS_LABEL.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/namespaces
type: string
ownerReferences:
- description: List of objects depended by this object.
- If ALL objects in the list have been deleted, this object
- will be garbage collected. If this object is managed
- by a controller, then an entry in this list will point
- to this controller, with the controller field set to
- true. There cannot be more than one managing controller.
+ description: |-
+ List of objects depended by this object. If ALL objects in the list have
+ been deleted, this object will be garbage collected. If this object is managed by a controller,
+ then an entry in this list will point to this controller, with the controller field set to true.
+ There cannot be more than one managing controller.
items:
- description: OwnerReference contains enough information
- to let you identify an owning object. An owning object
- must be in the same namespace as the dependent, or
+ description: |-
+ OwnerReference contains enough information to let you identify an owning
+ object. An owning object must be in the same namespace as the dependent, or
be cluster-scoped, so there is no namespace field.
properties:
apiVersion:
description: API version of the referent.
type: string
blockOwnerDeletion:
- description: If true, AND if the owner has the "foregroundDeletion"
- finalizer, then the owner cannot be deleted from
- the key-value store until this reference is removed.
+ description: |-
+ If true, AND if the owner has the "foregroundDeletion" finalizer, then
+ the owner cannot be deleted from the key-value store until this
+ reference is removed.
See https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
- for how the garbage collector interacts with this
- field and enforces the foreground deletion. Defaults
- to false. To set this field, a user needs "delete"
- permission of the owner, otherwise 422 (Unprocessable
- Entity) will be returned.
+ for how the garbage collector interacts with this field and enforces the foreground deletion.
+ Defaults to false.
+ To set this field, a user needs "delete" permission of the owner,
+ otherwise 422 (Unprocessable Entity) will be returned.
type: boolean
controller:
description: If true, this reference points to the
managing controller.
type: boolean
kind:
- description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind of the referent.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
- description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names'
+ description: |-
+ Name of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names
type: string
uid:
- description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids'
+ description: |-
+ UID of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids
type: string
required:
- apiVersion
@@ -473,62 +493,58 @@ spec:
x-kubernetes-list-type: map
type: object
providerID:
- description: ProviderID is the identification ID of the machine
- provided by the provider. This field must match the provider
- ID as seen on the node object corresponding to this machine.
- This field is required by higher level consumers of cluster-api.
- Example use case is cluster autoscaler with cluster-api
- as provider. Clean-up logic in the autoscaler compares machines
- to nodes to find out machines at provider which could not
- get registered as Kubernetes nodes. With cluster-api as
- a generic out-of-tree provider for autoscaler, this field
- is required by autoscaler to be able to have a provider
- view of the list of machines. Another list of nodes is queried
- from the k8s apiserver and then a comparison is done to
- find out unregistered machines and are marked for delete.
- This field will be set by the actuators and consumed by
- higher level entities like autoscaler that will be interfacing
- with cluster-api as generic provider.
+ description: |-
+ ProviderID is the identification ID of the machine provided by the provider.
+ This field must match the provider ID as seen on the node object corresponding to this machine.
+ This field is required by higher level consumers of cluster-api. Example use case is cluster autoscaler
+ with cluster-api as provider. Clean-up logic in the autoscaler compares machines to nodes to find out
+ machines at provider which could not get registered as Kubernetes nodes. With cluster-api as a
+ generic out-of-tree provider for autoscaler, this field is required by autoscaler to be
+ able to have a provider view of the list of machines. Another list of nodes is queried from the k8s apiserver
+ and then a comparison is done to find out unregistered machines and are marked for delete.
+ This field will be set by the actuators and consumed by higher level entities like autoscaler that will
+ be interfacing with cluster-api as generic provider.
type: string
providerSpec:
description: ProviderSpec details Provider-specific configuration
to use during node creation.
properties:
value:
- description: Value is an inlined, serialized representation
- of the resource configuration. It is recommended that
- providers maintain their own versioned API types that
- should be serialized/deserialized from this field, akin
- to component config.
+ description: |-
+ Value is an inlined, serialized representation of the resource
+ configuration. It is recommended that providers maintain their own
+ versioned API types that should be serialized/deserialized from this
+ field, akin to component config.
type: object
x-kubernetes-preserve-unknown-fields: true
type: object
taints:
- description: The list of the taints to be applied to the corresponding
- Node in additive manner. This list will not overwrite any
- other taints added to the Node on an ongoing basis by other
- entities. These taints should be actively reconciled e.g.
- if you ask the machine controller to apply a taint and then
- manually remove the taint the machine controller will put
- it back) but not have the machine controller remove any
- taints
+ description: |-
+ The list of the taints to be applied to the corresponding Node in additive
+ manner. This list will not overwrite any other taints added to the Node on
+ an ongoing basis by other entities. These taints should be actively reconciled
+ e.g. if you ask the machine controller to apply a taint and then manually remove
+ the taint the machine controller will put it back) but not have the machine controller
+ remove any taints
items:
- description: The node this Taint is attached to has the
- "effect" on any pod that does not tolerate the Taint.
+ description: |-
+ The node this Taint is attached to has the "effect" on
+ any pod that does not tolerate the Taint.
properties:
effect:
- description: Required. The effect of the taint on pods
- that do not tolerate the taint. Valid effects are
- NoSchedule, PreferNoSchedule and NoExecute.
+ description: |-
+ Required. The effect of the taint on pods
+ that do not tolerate the taint.
+ Valid effects are NoSchedule, PreferNoSchedule and NoExecute.
type: string
key:
description: Required. The taint key to be applied to
a node.
type: string
timeAdded:
- description: TimeAdded represents the time at which
- the taint was added. It is only written for NoExecute
- taints.
+ description: |-
+ TimeAdded represents the time at which the taint was added.
+ It is only written for NoExecute taints.
format: date-time
type: string
value:
@@ -548,13 +564,12 @@ spec:
description: MachineSetStatus defines the observed state of MachineSet
properties:
authoritativeAPI:
- description: authoritativeAPI is the API that is authoritative for
- this resource. Valid values are MachineAPI, ClusterAPI and Migrating.
- This value is updated by the migration controller to reflect the
- authoritative API. Machine API and Cluster API controllers use this
- value to determine whether or not to reconcile the resource. When
- set to Migrating, the migration controller is currently performing
- the handover of authority from one API to the other.
+ description: |-
+ authoritativeAPI is the API that is authoritative for this resource.
+ Valid values are MachineAPI, ClusterAPI and Migrating.
+ This value is updated by the migration controller to reflect the authoritative API.
+ Machine API and Cluster API controllers use this value to determine whether or not to reconcile the resource.
+ When set to Migrating, the migration controller is currently performing the handover of authority from one API to the other.
enum:
- MachineAPI
- ClusterAPI
@@ -577,39 +592,41 @@ spec:
operational state.
properties:
lastTransitionTime:
- description: Last time the condition transitioned from one status
- to another. This should be when the underlying condition changed.
- If that is not known, then using the time when the API field
- changed is acceptable.
+ description: |-
+ Last time the condition transitioned from one status to another.
+ This should be when the underlying condition changed. If that is not known, then using the time when
+ the API field changed is acceptable.
format: date-time
type: string
message:
- description: A human readable message indicating details about
- the transition. This field may be empty.
+ description: |-
+ A human readable message indicating details about the transition.
+ This field may be empty.
type: string
reason:
- description: The reason for the condition's last transition
- in CamelCase. The specific API may choose whether or not this
- field is considered a guaranteed API. This field may not be
- empty.
+ description: |-
+ The reason for the condition's last transition in CamelCase.
+ The specific API may choose whether or not this field is considered a guaranteed API.
+ This field may not be empty.
type: string
severity:
- description: Severity provides an explicit classification of
- Reason code, so the users or machines can immediately understand
- the current situation and act accordingly. The Severity field
- MUST be set only when Status=False.
+ description: |-
+ Severity provides an explicit classification of Reason code, so the users or machines can immediately
+ understand the current situation and act accordingly.
+ The Severity field MUST be set only when Status=False.
type: string
status:
description: Status of the condition, one of True, False, Unknown.
type: string
type:
- description: Type of condition in CamelCase or in foo.example.com/CamelCase.
- Many .condition.type values are consistent across resources
- like Available, but because arbitrary conditions can be useful
- (see .node.status.conditions), the ability to deconflict is
- important.
+ description: |-
+ Type of condition in CamelCase or in foo.example.com/CamelCase.
+ Many .condition.type values are consistent across resources like Available, but because arbitrary conditions
+ can be useful (see .node.status.conditions), the ability to deconflict is important.
type: string
required:
+ - lastTransitionTime
+ - status
- type
type: object
type: array
@@ -619,22 +636,25 @@ spec:
errorMessage:
type: string
errorReason:
- description: "In the event that there is a terminal problem reconciling
- the replicas, both ErrorReason and ErrorMessage will be set. ErrorReason
- will be populated with a succinct value suitable for machine interpretation,
- while ErrorMessage will contain a more verbose string suitable for
- logging and human consumption. \n These fields should not be set
- for transitive errors that a controller faces that are expected
- to be fixed automatically over time (like service outages), but
- instead indicate that something is fundamentally wrong with the
- MachineTemplate's spec or the configuration of the machine controller,
- and that manual intervention is required. Examples of terminal errors
- would be invalid combinations of settings in the spec, values that
- are unsupported by the machine controller, or the responsible machine
- controller itself being critically misconfigured. \n Any transient
- errors that occur during the reconciliation of Machines can be added
- as events to the MachineSet object and/or logged in the controller's
- output."
+ description: |-
+ In the event that there is a terminal problem reconciling the
+ replicas, both ErrorReason and ErrorMessage will be set. ErrorReason
+ will be populated with a succinct value suitable for machine
+ interpretation, while ErrorMessage will contain a more verbose
+ string suitable for logging and human consumption.
+
+ These fields should not be set for transitive errors that a
+ controller faces that are expected to be fixed automatically over
+ time (like service outages), but instead indicate that something is
+ fundamentally wrong with the MachineTemplate's spec or the configuration of
+ the machine controller, and that manual intervention is required. Examples
+ of terminal errors would be invalid combinations of settings in the
+ spec, values that are unsupported by the machine controller, or the
+ responsible machine controller itself being critically misconfigured.
+
+ Any transient errors that occur during the reconciliation of Machines
+ can be added as events to the MachineSet object and/or logged in the
+ controller's output.
type: string
fullyLabeledReplicas:
description: The number of replicas that have labels matching the
@@ -656,11 +676,9 @@ spec:
format: int32
type: integer
synchronizedGeneration:
- description: synchronizedGeneration is the generation of the authoritative
- resource that the non-authoritative resource is synchronised with.
- This field is set when the authoritative resource is updated and
- the sync controller has updated the non-authoritative resource to
- match.
+ description: |-
+ synchronizedGeneration is the generation of the authoritative resource that the non-authoritative resource is synchronised with.
+ This field is set when the authoritative resource is updated and the sync controller has updated the non-authoritative resource to match.
format: int64
minimum: 0
type: integer
diff --git a/vendor/github.com/openshift/api/machine/v1beta1/zz_generated.crd-manifests/0000_10_machine-api_01_machinesets-Default.crd.yaml b/vendor/github.com/openshift/api/machine/v1beta1/zz_generated.crd-manifests/0000_10_machine-api_01_machinesets-Default.crd.yaml
index f996db2c6f73436f9dc968fb612c2f8a8bee3a59..98180dd70021fb08c892f1a2b319ca5a89bb80d9 100644
--- a/vendor/github.com/openshift/api/machine/v1beta1/zz_generated.crd-manifests/0000_10_machine-api_01_machinesets-Default.crd.yaml
+++ b/vendor/github.com/openshift/api/machine/v1beta1/zz_generated.crd-manifests/0000_10_machine-api_01_machinesets-Default.crd.yaml
@@ -42,19 +42,24 @@ spec:
name: v1beta1
schema:
openAPIV3Schema:
- description: 'MachineSet ensures that a specified number of machines replicas
- are running at any given time. Compatibility level 2: Stable within a major
- release for a minimum of 9 months or 3 minor releases (whichever is longer).'
+ description: |-
+ MachineSet ensures that a specified number of machines replicas are running at any given time.
+ Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -62,55 +67,57 @@ spec:
description: MachineSetSpec defines the desired state of MachineSet
properties:
deletePolicy:
- description: DeletePolicy defines the policy used to identify nodes
- to delete when downscaling. Defaults to "Random". Valid values
- are "Random, "Newest", "Oldest"
+ description: |-
+ DeletePolicy defines the policy used to identify nodes to delete when downscaling.
+ Defaults to "Random". Valid values are "Random, "Newest", "Oldest"
enum:
- Random
- Newest
- Oldest
type: string
minReadySeconds:
- description: MinReadySeconds is the minimum number of seconds for
- which a newly created machine should be ready. Defaults to 0 (machine
- will be considered available as soon as it is ready)
+ description: |-
+ MinReadySeconds is the minimum number of seconds for which a newly created machine should be ready.
+ Defaults to 0 (machine will be considered available as soon as it is ready)
format: int32
type: integer
replicas:
default: 1
- description: Replicas is the number of desired replicas. This is a
- pointer to distinguish between explicit zero and unspecified. Defaults
- to 1.
+ description: |-
+ Replicas is the number of desired replicas.
+ This is a pointer to distinguish between explicit zero and unspecified.
+ Defaults to 1.
format: int32
type: integer
selector:
- description: 'Selector is a label query over machines that should
- match the replica count. Label keys and values that must match in
- order to be controlled by this MachineSet. It must match the machine
- template''s labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors'
+ description: |-
+ Selector is a label query over machines that should match the replica count.
+ Label keys and values that must match in order to be controlled by this MachineSet.
+ It must match the machine template's labels.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors
properties:
matchExpressions:
description: matchExpressions is a list of label selector requirements.
The requirements are ANDed.
items:
- description: A label selector requirement is a selector that
- contains values, a key, and an operator that relates the key
- and values.
+ description: |-
+ A label selector requirement is a selector that contains values, a key, and an operator that
+ relates the key and values.
properties:
key:
description: key is the label key that the selector applies
to.
type: string
operator:
- description: operator represents a key's relationship to
- a set of values. Valid operators are In, NotIn, Exists
- and DoesNotExist.
+ description: |-
+ operator represents a key's relationship to a set of values.
+ Valid operators are In, NotIn, Exists and DoesNotExist.
type: string
values:
- description: values is an array of string values. If the
- operator is In or NotIn, the values array must be non-empty.
- If the operator is Exists or DoesNotExist, the values
- array must be empty. This array is replaced during a strategic
+ description: |-
+ values is an array of string values. If the operator is In or NotIn,
+ the values array must be non-empty. If the operator is Exists or DoesNotExist,
+ the values array must be empty. This array is replaced during a strategic
merge patch.
items:
type: string
@@ -125,111 +132,123 @@ spec:
matchLabels:
additionalProperties:
type: string
- description: matchLabels is a map of {key,value} pairs. A single
- {key,value} in the matchLabels map is equivalent to an element
- of matchExpressions, whose key field is "key", the operator
- is "In", and the values array contains only "value". The requirements
- are ANDed.
+ description: |-
+ matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
+ map is equivalent to an element of matchExpressions, whose key field is "key", the
+ operator is "In", and the values array contains only "value". The requirements are ANDed.
type: object
type: object
x-kubernetes-map-type: atomic
template:
- description: Template is the object that describes the machine that
- will be created if insufficient replicas are detected.
+ description: |-
+ Template is the object that describes the machine that will be created if
+ insufficient replicas are detected.
properties:
metadata:
- description: 'Standard object''s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata'
+ description: |-
+ Standard object's metadata.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
properties:
annotations:
additionalProperties:
type: string
- description: 'Annotations is an unstructured key value map
- stored with a resource that may be set by external tools
- to store and retrieve arbitrary metadata. They are not queryable
- and should be preserved when modifying objects. More info:
- http://kubernetes.io/docs/user-guide/annotations'
+ description: |-
+ Annotations is an unstructured key value map stored with a resource that may be
+ set by external tools to store and retrieve arbitrary metadata. They are not
+ queryable and should be preserved when modifying objects.
+ More info: http://kubernetes.io/docs/user-guide/annotations
type: object
generateName:
- description: "GenerateName is an optional prefix, used by
- the server, to generate a unique name ONLY IF the Name field
- has not been provided. If this field is used, the name returned
- to the client will be different than the name passed. This
- value will also be combined with a unique suffix. The provided
- value has the same validation rules as the Name field, and
- may be truncated by the length of the suffix required to
- make the value unique on the server. \n If this field is
- specified and the generated name exists, the server will
- NOT return a 409 - instead, it will either return 201 Created
- or 500 with Reason ServerTimeout indicating a unique name
- could not be found in the time allotted, and the client
- should retry (optionally after the time indicated in the
- Retry-After header). \n Applied only if Name is not specified.
- More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency"
+ description: |-
+ GenerateName is an optional prefix, used by the server, to generate a unique
+ name ONLY IF the Name field has not been provided.
+ If this field is used, the name returned to the client will be different
+ than the name passed. This value will also be combined with a unique suffix.
+ The provided value has the same validation rules as the Name field,
+ and may be truncated by the length of the suffix required to make the value
+ unique on the server.
+
+ If this field is specified and the generated name exists, the server will
+ NOT return a 409 - instead, it will either return 201 Created or 500 with Reason
+ ServerTimeout indicating a unique name could not be found in the time allotted, and the client
+ should retry (optionally after the time indicated in the Retry-After header).
+
+ Applied only if Name is not specified.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
type: string
labels:
additionalProperties:
type: string
- description: 'Map of string keys and values that can be used
- to organize and categorize (scope and select) objects. May
- match selectors of replication controllers and services.
- More info: http://kubernetes.io/docs/user-guide/labels'
+ description: |-
+ Map of string keys and values that can be used to organize and categorize
+ (scope and select) objects. May match selectors of replication controllers
+ and services.
+ More info: http://kubernetes.io/docs/user-guide/labels
type: object
name:
- description: 'Name must be unique within a namespace. Is required
- when creating resources, although some resources may allow
- a client to request the generation of an appropriate name
- automatically. Name is primarily intended for creation idempotence
- and configuration definition. Cannot be updated. More info:
- http://kubernetes.io/docs/user-guide/identifiers#names'
+ description: |-
+ Name must be unique within a namespace. Is required when creating resources, although
+ some resources may allow a client to request the generation of an appropriate name
+ automatically. Name is primarily intended for creation idempotence and configuration
+ definition.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/identifiers#names
type: string
namespace:
- description: "Namespace defines the space within each name
- must be unique. An empty namespace is equivalent to the
- \"default\" namespace, but \"default\" is the canonical
- representation. Not all objects are required to be scoped
- to a namespace - the value of this field for those objects
- will be empty. \n Must be a DNS_LABEL. Cannot be updated.
- More info: http://kubernetes.io/docs/user-guide/namespaces"
+ description: |-
+ Namespace defines the space within each name must be unique. An empty namespace is
+ equivalent to the "default" namespace, but "default" is the canonical representation.
+ Not all objects are required to be scoped to a namespace - the value of this field for
+ those objects will be empty.
+
+ Must be a DNS_LABEL.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/namespaces
type: string
ownerReferences:
- description: List of objects depended by this object. If ALL
- objects in the list have been deleted, this object will
- be garbage collected. If this object is managed by a controller,
- then an entry in this list will point to this controller,
- with the controller field set to true. There cannot be more
- than one managing controller.
+ description: |-
+ List of objects depended by this object. If ALL objects in the list have
+ been deleted, this object will be garbage collected. If this object is managed by a controller,
+ then an entry in this list will point to this controller, with the controller field set to true.
+ There cannot be more than one managing controller.
items:
- description: OwnerReference contains enough information
- to let you identify an owning object. An owning object
- must be in the same namespace as the dependent, or be
- cluster-scoped, so there is no namespace field.
+ description: |-
+ OwnerReference contains enough information to let you identify an owning
+ object. An owning object must be in the same namespace as the dependent, or
+ be cluster-scoped, so there is no namespace field.
properties:
apiVersion:
description: API version of the referent.
type: string
blockOwnerDeletion:
- description: If true, AND if the owner has the "foregroundDeletion"
- finalizer, then the owner cannot be deleted from the
- key-value store until this reference is removed. See
- https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
- for how the garbage collector interacts with this
- field and enforces the foreground deletion. Defaults
- to false. To set this field, a user needs "delete"
- permission of the owner, otherwise 422 (Unprocessable
- Entity) will be returned.
+ description: |-
+ If true, AND if the owner has the "foregroundDeletion" finalizer, then
+ the owner cannot be deleted from the key-value store until this
+ reference is removed.
+ See https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
+ for how the garbage collector interacts with this field and enforces the foreground deletion.
+ Defaults to false.
+ To set this field, a user needs "delete" permission of the owner,
+ otherwise 422 (Unprocessable Entity) will be returned.
type: boolean
controller:
description: If true, this reference points to the managing
controller.
type: boolean
kind:
- description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind of the referent.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
- description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names'
+ description: |-
+ Name of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names
type: string
uid:
- description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids'
+ description: |-
+ UID of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids
type: string
required:
- apiVersion
@@ -244,39 +263,40 @@ spec:
x-kubernetes-list-type: map
type: object
spec:
- description: 'Specification of the desired behavior of the machine.
- More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status'
+ description: |-
+ Specification of the desired behavior of the machine.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
properties:
lifecycleHooks:
- description: LifecycleHooks allow users to pause operations
- on the machine at certain predefined points within the machine
- lifecycle.
+ description: |-
+ LifecycleHooks allow users to pause operations on the machine at
+ certain predefined points within the machine lifecycle.
properties:
preDrain:
- description: PreDrain hooks prevent the machine from being
- drained. This also blocks further lifecycle events,
- such as termination.
+ description: |-
+ PreDrain hooks prevent the machine from being drained.
+ This also blocks further lifecycle events, such as termination.
items:
description: LifecycleHook represents a single instance
of a lifecycle hook
properties:
name:
- description: Name defines a unique name for the
- lifcycle hook. The name should be unique and descriptive,
- ideally 1-3 words, in CamelCase or it may be namespaced,
- eg. foo.example.com/CamelCase. Names must be unique
- and should only be managed by a single entity.
+ description: |-
+ Name defines a unique name for the lifcycle hook.
+ The name should be unique and descriptive, ideally 1-3 words, in CamelCase or
+ it may be namespaced, eg. foo.example.com/CamelCase.
+ Names must be unique and should only be managed by a single entity.
maxLength: 256
minLength: 3
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
owner:
- description: Owner defines the owner of the lifecycle
- hook. This should be descriptive enough so that
- users can identify who/what is responsible for
- blocking the lifecycle. This could be the name
- of a controller (e.g. clusteroperator/etcd) or
- an administrator managing the hook.
+ description: |-
+ Owner defines the owner of the lifecycle hook.
+ This should be descriptive enough so that users can identify
+ who/what is responsible for blocking the lifecycle.
+ This could be the name of a controller (e.g. clusteroperator/etcd)
+ or an administrator managing the hook.
maxLength: 512
minLength: 3
type: string
@@ -289,30 +309,30 @@ spec:
- name
x-kubernetes-list-type: map
preTerminate:
- description: PreTerminate hooks prevent the machine from
- being terminated. PreTerminate hooks be actioned after
- the Machine has been drained.
+ description: |-
+ PreTerminate hooks prevent the machine from being terminated.
+ PreTerminate hooks be actioned after the Machine has been drained.
items:
description: LifecycleHook represents a single instance
of a lifecycle hook
properties:
name:
- description: Name defines a unique name for the
- lifcycle hook. The name should be unique and descriptive,
- ideally 1-3 words, in CamelCase or it may be namespaced,
- eg. foo.example.com/CamelCase. Names must be unique
- and should only be managed by a single entity.
+ description: |-
+ Name defines a unique name for the lifcycle hook.
+ The name should be unique and descriptive, ideally 1-3 words, in CamelCase or
+ it may be namespaced, eg. foo.example.com/CamelCase.
+ Names must be unique and should only be managed by a single entity.
maxLength: 256
minLength: 3
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
owner:
- description: Owner defines the owner of the lifecycle
- hook. This should be descriptive enough so that
- users can identify who/what is responsible for
- blocking the lifecycle. This could be the name
- of a controller (e.g. clusteroperator/etcd) or
- an administrator managing the hook.
+ description: |-
+ Owner defines the owner of the lifecycle hook.
+ This should be descriptive enough so that users can identify
+ who/what is responsible for blocking the lifecycle.
+ This could be the name of a controller (e.g. clusteroperator/etcd)
+ or an administrator managing the hook.
maxLength: 512
minLength: 3
type: string
@@ -326,101 +346,111 @@ spec:
x-kubernetes-list-type: map
type: object
metadata:
- description: ObjectMeta will autopopulate the Node created.
- Use this to indicate what labels, annotations, name prefix,
- etc., should be used when creating the Node.
+ description: |-
+ ObjectMeta will autopopulate the Node created. Use this to
+ indicate what labels, annotations, name prefix, etc., should be used
+ when creating the Node.
properties:
annotations:
additionalProperties:
type: string
- description: 'Annotations is an unstructured key value
- map stored with a resource that may be set by external
- tools to store and retrieve arbitrary metadata. They
- are not queryable and should be preserved when modifying
- objects. More info: http://kubernetes.io/docs/user-guide/annotations'
+ description: |-
+ Annotations is an unstructured key value map stored with a resource that may be
+ set by external tools to store and retrieve arbitrary metadata. They are not
+ queryable and should be preserved when modifying objects.
+ More info: http://kubernetes.io/docs/user-guide/annotations
type: object
generateName:
- description: "GenerateName is an optional prefix, used
- by the server, to generate a unique name ONLY IF the
- Name field has not been provided. If this field is used,
- the name returned to the client will be different than
- the name passed. This value will also be combined with
- a unique suffix. The provided value has the same validation
- rules as the Name field, and may be truncated by the
- length of the suffix required to make the value unique
- on the server. \n If this field is specified and the
- generated name exists, the server will NOT return a
- 409 - instead, it will either return 201 Created or
- 500 with Reason ServerTimeout indicating a unique name
- could not be found in the time allotted, and the client
- should retry (optionally after the time indicated in
- the Retry-After header). \n Applied only if Name is
- not specified. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency"
+ description: |-
+ GenerateName is an optional prefix, used by the server, to generate a unique
+ name ONLY IF the Name field has not been provided.
+ If this field is used, the name returned to the client will be different
+ than the name passed. This value will also be combined with a unique suffix.
+ The provided value has the same validation rules as the Name field,
+ and may be truncated by the length of the suffix required to make the value
+ unique on the server.
+
+ If this field is specified and the generated name exists, the server will
+ NOT return a 409 - instead, it will either return 201 Created or 500 with Reason
+ ServerTimeout indicating a unique name could not be found in the time allotted, and the client
+ should retry (optionally after the time indicated in the Retry-After header).
+
+ Applied only if Name is not specified.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
type: string
labels:
additionalProperties:
type: string
- description: 'Map of string keys and values that can be
- used to organize and categorize (scope and select) objects.
- May match selectors of replication controllers and services.
- More info: http://kubernetes.io/docs/user-guide/labels'
+ description: |-
+ Map of string keys and values that can be used to organize and categorize
+ (scope and select) objects. May match selectors of replication controllers
+ and services.
+ More info: http://kubernetes.io/docs/user-guide/labels
type: object
name:
- description: 'Name must be unique within a namespace.
- Is required when creating resources, although some resources
- may allow a client to request the generation of an appropriate
- name automatically. Name is primarily intended for creation
- idempotence and configuration definition. Cannot be
- updated. More info: http://kubernetes.io/docs/user-guide/identifiers#names'
+ description: |-
+ Name must be unique within a namespace. Is required when creating resources, although
+ some resources may allow a client to request the generation of an appropriate name
+ automatically. Name is primarily intended for creation idempotence and configuration
+ definition.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/identifiers#names
type: string
namespace:
- description: "Namespace defines the space within each
- name must be unique. An empty namespace is equivalent
- to the \"default\" namespace, but \"default\" is the
- canonical representation. Not all objects are required
- to be scoped to a namespace - the value of this field
- for those objects will be empty. \n Must be a DNS_LABEL.
- Cannot be updated. More info: http://kubernetes.io/docs/user-guide/namespaces"
+ description: |-
+ Namespace defines the space within each name must be unique. An empty namespace is
+ equivalent to the "default" namespace, but "default" is the canonical representation.
+ Not all objects are required to be scoped to a namespace - the value of this field for
+ those objects will be empty.
+
+ Must be a DNS_LABEL.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/namespaces
type: string
ownerReferences:
- description: List of objects depended by this object.
- If ALL objects in the list have been deleted, this object
- will be garbage collected. If this object is managed
- by a controller, then an entry in this list will point
- to this controller, with the controller field set to
- true. There cannot be more than one managing controller.
+ description: |-
+ List of objects depended by this object. If ALL objects in the list have
+ been deleted, this object will be garbage collected. If this object is managed by a controller,
+ then an entry in this list will point to this controller, with the controller field set to true.
+ There cannot be more than one managing controller.
items:
- description: OwnerReference contains enough information
- to let you identify an owning object. An owning object
- must be in the same namespace as the dependent, or
+ description: |-
+ OwnerReference contains enough information to let you identify an owning
+ object. An owning object must be in the same namespace as the dependent, or
be cluster-scoped, so there is no namespace field.
properties:
apiVersion:
description: API version of the referent.
type: string
blockOwnerDeletion:
- description: If true, AND if the owner has the "foregroundDeletion"
- finalizer, then the owner cannot be deleted from
- the key-value store until this reference is removed.
+ description: |-
+ If true, AND if the owner has the "foregroundDeletion" finalizer, then
+ the owner cannot be deleted from the key-value store until this
+ reference is removed.
See https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
- for how the garbage collector interacts with this
- field and enforces the foreground deletion. Defaults
- to false. To set this field, a user needs "delete"
- permission of the owner, otherwise 422 (Unprocessable
- Entity) will be returned.
+ for how the garbage collector interacts with this field and enforces the foreground deletion.
+ Defaults to false.
+ To set this field, a user needs "delete" permission of the owner,
+ otherwise 422 (Unprocessable Entity) will be returned.
type: boolean
controller:
description: If true, this reference points to the
managing controller.
type: boolean
kind:
- description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind of the referent.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
- description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names'
+ description: |-
+ Name of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names
type: string
uid:
- description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids'
+ description: |-
+ UID of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids
type: string
required:
- apiVersion
@@ -435,62 +465,58 @@ spec:
x-kubernetes-list-type: map
type: object
providerID:
- description: ProviderID is the identification ID of the machine
- provided by the provider. This field must match the provider
- ID as seen on the node object corresponding to this machine.
- This field is required by higher level consumers of cluster-api.
- Example use case is cluster autoscaler with cluster-api
- as provider. Clean-up logic in the autoscaler compares machines
- to nodes to find out machines at provider which could not
- get registered as Kubernetes nodes. With cluster-api as
- a generic out-of-tree provider for autoscaler, this field
- is required by autoscaler to be able to have a provider
- view of the list of machines. Another list of nodes is queried
- from the k8s apiserver and then a comparison is done to
- find out unregistered machines and are marked for delete.
- This field will be set by the actuators and consumed by
- higher level entities like autoscaler that will be interfacing
- with cluster-api as generic provider.
+ description: |-
+ ProviderID is the identification ID of the machine provided by the provider.
+ This field must match the provider ID as seen on the node object corresponding to this machine.
+ This field is required by higher level consumers of cluster-api. Example use case is cluster autoscaler
+ with cluster-api as provider. Clean-up logic in the autoscaler compares machines to nodes to find out
+ machines at provider which could not get registered as Kubernetes nodes. With cluster-api as a
+ generic out-of-tree provider for autoscaler, this field is required by autoscaler to be
+ able to have a provider view of the list of machines. Another list of nodes is queried from the k8s apiserver
+ and then a comparison is done to find out unregistered machines and are marked for delete.
+ This field will be set by the actuators and consumed by higher level entities like autoscaler that will
+ be interfacing with cluster-api as generic provider.
type: string
providerSpec:
description: ProviderSpec details Provider-specific configuration
to use during node creation.
properties:
value:
- description: Value is an inlined, serialized representation
- of the resource configuration. It is recommended that
- providers maintain their own versioned API types that
- should be serialized/deserialized from this field, akin
- to component config.
+ description: |-
+ Value is an inlined, serialized representation of the resource
+ configuration. It is recommended that providers maintain their own
+ versioned API types that should be serialized/deserialized from this
+ field, akin to component config.
type: object
x-kubernetes-preserve-unknown-fields: true
type: object
taints:
- description: The list of the taints to be applied to the corresponding
- Node in additive manner. This list will not overwrite any
- other taints added to the Node on an ongoing basis by other
- entities. These taints should be actively reconciled e.g.
- if you ask the machine controller to apply a taint and then
- manually remove the taint the machine controller will put
- it back) but not have the machine controller remove any
- taints
+ description: |-
+ The list of the taints to be applied to the corresponding Node in additive
+ manner. This list will not overwrite any other taints added to the Node on
+ an ongoing basis by other entities. These taints should be actively reconciled
+ e.g. if you ask the machine controller to apply a taint and then manually remove
+ the taint the machine controller will put it back) but not have the machine controller
+ remove any taints
items:
- description: The node this Taint is attached to has the
- "effect" on any pod that does not tolerate the Taint.
+ description: |-
+ The node this Taint is attached to has the "effect" on
+ any pod that does not tolerate the Taint.
properties:
effect:
- description: Required. The effect of the taint on pods
- that do not tolerate the taint. Valid effects are
- NoSchedule, PreferNoSchedule and NoExecute.
+ description: |-
+ Required. The effect of the taint on pods
+ that do not tolerate the taint.
+ Valid effects are NoSchedule, PreferNoSchedule and NoExecute.
type: string
key:
description: Required. The taint key to be applied to
a node.
type: string
timeAdded:
- description: TimeAdded represents the time at which
- the taint was added. It is only written for NoExecute
- taints.
+ description: |-
+ TimeAdded represents the time at which the taint was added.
+ It is only written for NoExecute taints.
format: date-time
type: string
value:
@@ -521,39 +547,41 @@ spec:
operational state.
properties:
lastTransitionTime:
- description: Last time the condition transitioned from one status
- to another. This should be when the underlying condition changed.
- If that is not known, then using the time when the API field
- changed is acceptable.
+ description: |-
+ Last time the condition transitioned from one status to another.
+ This should be when the underlying condition changed. If that is not known, then using the time when
+ the API field changed is acceptable.
format: date-time
type: string
message:
- description: A human readable message indicating details about
- the transition. This field may be empty.
+ description: |-
+ A human readable message indicating details about the transition.
+ This field may be empty.
type: string
reason:
- description: The reason for the condition's last transition
- in CamelCase. The specific API may choose whether or not this
- field is considered a guaranteed API. This field may not be
- empty.
+ description: |-
+ The reason for the condition's last transition in CamelCase.
+ The specific API may choose whether or not this field is considered a guaranteed API.
+ This field may not be empty.
type: string
severity:
- description: Severity provides an explicit classification of
- Reason code, so the users or machines can immediately understand
- the current situation and act accordingly. The Severity field
- MUST be set only when Status=False.
+ description: |-
+ Severity provides an explicit classification of Reason code, so the users or machines can immediately
+ understand the current situation and act accordingly.
+ The Severity field MUST be set only when Status=False.
type: string
status:
description: Status of the condition, one of True, False, Unknown.
type: string
type:
- description: Type of condition in CamelCase or in foo.example.com/CamelCase.
- Many .condition.type values are consistent across resources
- like Available, but because arbitrary conditions can be useful
- (see .node.status.conditions), the ability to deconflict is
- important.
+ description: |-
+ Type of condition in CamelCase or in foo.example.com/CamelCase.
+ Many .condition.type values are consistent across resources like Available, but because arbitrary conditions
+ can be useful (see .node.status.conditions), the ability to deconflict is important.
type: string
required:
+ - lastTransitionTime
+ - status
- type
type: object
type: array
@@ -563,22 +591,25 @@ spec:
errorMessage:
type: string
errorReason:
- description: "In the event that there is a terminal problem reconciling
- the replicas, both ErrorReason and ErrorMessage will be set. ErrorReason
- will be populated with a succinct value suitable for machine interpretation,
- while ErrorMessage will contain a more verbose string suitable for
- logging and human consumption. \n These fields should not be set
- for transitive errors that a controller faces that are expected
- to be fixed automatically over time (like service outages), but
- instead indicate that something is fundamentally wrong with the
- MachineTemplate's spec or the configuration of the machine controller,
- and that manual intervention is required. Examples of terminal errors
- would be invalid combinations of settings in the spec, values that
- are unsupported by the machine controller, or the responsible machine
- controller itself being critically misconfigured. \n Any transient
- errors that occur during the reconciliation of Machines can be added
- as events to the MachineSet object and/or logged in the controller's
- output."
+ description: |-
+ In the event that there is a terminal problem reconciling the
+ replicas, both ErrorReason and ErrorMessage will be set. ErrorReason
+ will be populated with a succinct value suitable for machine
+ interpretation, while ErrorMessage will contain a more verbose
+ string suitable for logging and human consumption.
+
+ These fields should not be set for transitive errors that a
+ controller faces that are expected to be fixed automatically over
+ time (like service outages), but instead indicate that something is
+ fundamentally wrong with the MachineTemplate's spec or the configuration of
+ the machine controller, and that manual intervention is required. Examples
+ of terminal errors would be invalid combinations of settings in the
+ spec, values that are unsupported by the machine controller, or the
+ responsible machine controller itself being critically misconfigured.
+
+ Any transient errors that occur during the reconciliation of Machines
+ can be added as events to the MachineSet object and/or logged in the
+ controller's output.
type: string
fullyLabeledReplicas:
description: The number of replicas that have labels matching the
diff --git a/vendor/github.com/openshift/api/machine/v1beta1/zz_generated.crd-manifests/0000_10_machine-api_01_machinesets-DevPreviewNoUpgrade.crd.yaml b/vendor/github.com/openshift/api/machine/v1beta1/zz_generated.crd-manifests/0000_10_machine-api_01_machinesets-DevPreviewNoUpgrade.crd.yaml
index 1a408eaf89e965c7ce0ae3f75e23871b43df7eaa..74ff9ac76bbd96f615e3bdfcb5164044596ebd4c 100644
--- a/vendor/github.com/openshift/api/machine/v1beta1/zz_generated.crd-manifests/0000_10_machine-api_01_machinesets-DevPreviewNoUpgrade.crd.yaml
+++ b/vendor/github.com/openshift/api/machine/v1beta1/zz_generated.crd-manifests/0000_10_machine-api_01_machinesets-DevPreviewNoUpgrade.crd.yaml
@@ -42,19 +42,24 @@ spec:
name: v1beta1
schema:
openAPIV3Schema:
- description: 'MachineSet ensures that a specified number of machines replicas
- are running at any given time. Compatibility level 2: Stable within a major
- release for a minimum of 9 months or 3 minor releases (whichever is longer).'
+ description: |-
+ MachineSet ensures that a specified number of machines replicas are running at any given time.
+ Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -62,55 +67,57 @@ spec:
description: MachineSetSpec defines the desired state of MachineSet
properties:
deletePolicy:
- description: DeletePolicy defines the policy used to identify nodes
- to delete when downscaling. Defaults to "Random". Valid values
- are "Random, "Newest", "Oldest"
+ description: |-
+ DeletePolicy defines the policy used to identify nodes to delete when downscaling.
+ Defaults to "Random". Valid values are "Random, "Newest", "Oldest"
enum:
- Random
- Newest
- Oldest
type: string
minReadySeconds:
- description: MinReadySeconds is the minimum number of seconds for
- which a newly created machine should be ready. Defaults to 0 (machine
- will be considered available as soon as it is ready)
+ description: |-
+ MinReadySeconds is the minimum number of seconds for which a newly created machine should be ready.
+ Defaults to 0 (machine will be considered available as soon as it is ready)
format: int32
type: integer
replicas:
default: 1
- description: Replicas is the number of desired replicas. This is a
- pointer to distinguish between explicit zero and unspecified. Defaults
- to 1.
+ description: |-
+ Replicas is the number of desired replicas.
+ This is a pointer to distinguish between explicit zero and unspecified.
+ Defaults to 1.
format: int32
type: integer
selector:
- description: 'Selector is a label query over machines that should
- match the replica count. Label keys and values that must match in
- order to be controlled by this MachineSet. It must match the machine
- template''s labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors'
+ description: |-
+ Selector is a label query over machines that should match the replica count.
+ Label keys and values that must match in order to be controlled by this MachineSet.
+ It must match the machine template's labels.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors
properties:
matchExpressions:
description: matchExpressions is a list of label selector requirements.
The requirements are ANDed.
items:
- description: A label selector requirement is a selector that
- contains values, a key, and an operator that relates the key
- and values.
+ description: |-
+ A label selector requirement is a selector that contains values, a key, and an operator that
+ relates the key and values.
properties:
key:
description: key is the label key that the selector applies
to.
type: string
operator:
- description: operator represents a key's relationship to
- a set of values. Valid operators are In, NotIn, Exists
- and DoesNotExist.
+ description: |-
+ operator represents a key's relationship to a set of values.
+ Valid operators are In, NotIn, Exists and DoesNotExist.
type: string
values:
- description: values is an array of string values. If the
- operator is In or NotIn, the values array must be non-empty.
- If the operator is Exists or DoesNotExist, the values
- array must be empty. This array is replaced during a strategic
+ description: |-
+ values is an array of string values. If the operator is In or NotIn,
+ the values array must be non-empty. If the operator is Exists or DoesNotExist,
+ the values array must be empty. This array is replaced during a strategic
merge patch.
items:
type: string
@@ -125,111 +132,123 @@ spec:
matchLabels:
additionalProperties:
type: string
- description: matchLabels is a map of {key,value} pairs. A single
- {key,value} in the matchLabels map is equivalent to an element
- of matchExpressions, whose key field is "key", the operator
- is "In", and the values array contains only "value". The requirements
- are ANDed.
+ description: |-
+ matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
+ map is equivalent to an element of matchExpressions, whose key field is "key", the
+ operator is "In", and the values array contains only "value". The requirements are ANDed.
type: object
type: object
x-kubernetes-map-type: atomic
template:
- description: Template is the object that describes the machine that
- will be created if insufficient replicas are detected.
+ description: |-
+ Template is the object that describes the machine that will be created if
+ insufficient replicas are detected.
properties:
metadata:
- description: 'Standard object''s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata'
+ description: |-
+ Standard object's metadata.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
properties:
annotations:
additionalProperties:
type: string
- description: 'Annotations is an unstructured key value map
- stored with a resource that may be set by external tools
- to store and retrieve arbitrary metadata. They are not queryable
- and should be preserved when modifying objects. More info:
- http://kubernetes.io/docs/user-guide/annotations'
+ description: |-
+ Annotations is an unstructured key value map stored with a resource that may be
+ set by external tools to store and retrieve arbitrary metadata. They are not
+ queryable and should be preserved when modifying objects.
+ More info: http://kubernetes.io/docs/user-guide/annotations
type: object
generateName:
- description: "GenerateName is an optional prefix, used by
- the server, to generate a unique name ONLY IF the Name field
- has not been provided. If this field is used, the name returned
- to the client will be different than the name passed. This
- value will also be combined with a unique suffix. The provided
- value has the same validation rules as the Name field, and
- may be truncated by the length of the suffix required to
- make the value unique on the server. \n If this field is
- specified and the generated name exists, the server will
- NOT return a 409 - instead, it will either return 201 Created
- or 500 with Reason ServerTimeout indicating a unique name
- could not be found in the time allotted, and the client
- should retry (optionally after the time indicated in the
- Retry-After header). \n Applied only if Name is not specified.
- More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency"
+ description: |-
+ GenerateName is an optional prefix, used by the server, to generate a unique
+ name ONLY IF the Name field has not been provided.
+ If this field is used, the name returned to the client will be different
+ than the name passed. This value will also be combined with a unique suffix.
+ The provided value has the same validation rules as the Name field,
+ and may be truncated by the length of the suffix required to make the value
+ unique on the server.
+
+ If this field is specified and the generated name exists, the server will
+ NOT return a 409 - instead, it will either return 201 Created or 500 with Reason
+ ServerTimeout indicating a unique name could not be found in the time allotted, and the client
+ should retry (optionally after the time indicated in the Retry-After header).
+
+ Applied only if Name is not specified.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
type: string
labels:
additionalProperties:
type: string
- description: 'Map of string keys and values that can be used
- to organize and categorize (scope and select) objects. May
- match selectors of replication controllers and services.
- More info: http://kubernetes.io/docs/user-guide/labels'
+ description: |-
+ Map of string keys and values that can be used to organize and categorize
+ (scope and select) objects. May match selectors of replication controllers
+ and services.
+ More info: http://kubernetes.io/docs/user-guide/labels
type: object
name:
- description: 'Name must be unique within a namespace. Is required
- when creating resources, although some resources may allow
- a client to request the generation of an appropriate name
- automatically. Name is primarily intended for creation idempotence
- and configuration definition. Cannot be updated. More info:
- http://kubernetes.io/docs/user-guide/identifiers#names'
+ description: |-
+ Name must be unique within a namespace. Is required when creating resources, although
+ some resources may allow a client to request the generation of an appropriate name
+ automatically. Name is primarily intended for creation idempotence and configuration
+ definition.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/identifiers#names
type: string
namespace:
- description: "Namespace defines the space within each name
- must be unique. An empty namespace is equivalent to the
- \"default\" namespace, but \"default\" is the canonical
- representation. Not all objects are required to be scoped
- to a namespace - the value of this field for those objects
- will be empty. \n Must be a DNS_LABEL. Cannot be updated.
- More info: http://kubernetes.io/docs/user-guide/namespaces"
+ description: |-
+ Namespace defines the space within each name must be unique. An empty namespace is
+ equivalent to the "default" namespace, but "default" is the canonical representation.
+ Not all objects are required to be scoped to a namespace - the value of this field for
+ those objects will be empty.
+
+ Must be a DNS_LABEL.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/namespaces
type: string
ownerReferences:
- description: List of objects depended by this object. If ALL
- objects in the list have been deleted, this object will
- be garbage collected. If this object is managed by a controller,
- then an entry in this list will point to this controller,
- with the controller field set to true. There cannot be more
- than one managing controller.
+ description: |-
+ List of objects depended by this object. If ALL objects in the list have
+ been deleted, this object will be garbage collected. If this object is managed by a controller,
+ then an entry in this list will point to this controller, with the controller field set to true.
+ There cannot be more than one managing controller.
items:
- description: OwnerReference contains enough information
- to let you identify an owning object. An owning object
- must be in the same namespace as the dependent, or be
- cluster-scoped, so there is no namespace field.
+ description: |-
+ OwnerReference contains enough information to let you identify an owning
+ object. An owning object must be in the same namespace as the dependent, or
+ be cluster-scoped, so there is no namespace field.
properties:
apiVersion:
description: API version of the referent.
type: string
blockOwnerDeletion:
- description: If true, AND if the owner has the "foregroundDeletion"
- finalizer, then the owner cannot be deleted from the
- key-value store until this reference is removed. See
- https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
- for how the garbage collector interacts with this
- field and enforces the foreground deletion. Defaults
- to false. To set this field, a user needs "delete"
- permission of the owner, otherwise 422 (Unprocessable
- Entity) will be returned.
+ description: |-
+ If true, AND if the owner has the "foregroundDeletion" finalizer, then
+ the owner cannot be deleted from the key-value store until this
+ reference is removed.
+ See https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
+ for how the garbage collector interacts with this field and enforces the foreground deletion.
+ Defaults to false.
+ To set this field, a user needs "delete" permission of the owner,
+ otherwise 422 (Unprocessable Entity) will be returned.
type: boolean
controller:
description: If true, this reference points to the managing
controller.
type: boolean
kind:
- description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind of the referent.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
- description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names'
+ description: |-
+ Name of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names
type: string
uid:
- description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids'
+ description: |-
+ UID of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids
type: string
required:
- apiVersion
@@ -244,39 +263,40 @@ spec:
x-kubernetes-list-type: map
type: object
spec:
- description: 'Specification of the desired behavior of the machine.
- More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status'
+ description: |-
+ Specification of the desired behavior of the machine.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
properties:
lifecycleHooks:
- description: LifecycleHooks allow users to pause operations
- on the machine at certain predefined points within the machine
- lifecycle.
+ description: |-
+ LifecycleHooks allow users to pause operations on the machine at
+ certain predefined points within the machine lifecycle.
properties:
preDrain:
- description: PreDrain hooks prevent the machine from being
- drained. This also blocks further lifecycle events,
- such as termination.
+ description: |-
+ PreDrain hooks prevent the machine from being drained.
+ This also blocks further lifecycle events, such as termination.
items:
description: LifecycleHook represents a single instance
of a lifecycle hook
properties:
name:
- description: Name defines a unique name for the
- lifcycle hook. The name should be unique and descriptive,
- ideally 1-3 words, in CamelCase or it may be namespaced,
- eg. foo.example.com/CamelCase. Names must be unique
- and should only be managed by a single entity.
+ description: |-
+ Name defines a unique name for the lifcycle hook.
+ The name should be unique and descriptive, ideally 1-3 words, in CamelCase or
+ it may be namespaced, eg. foo.example.com/CamelCase.
+ Names must be unique and should only be managed by a single entity.
maxLength: 256
minLength: 3
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
owner:
- description: Owner defines the owner of the lifecycle
- hook. This should be descriptive enough so that
- users can identify who/what is responsible for
- blocking the lifecycle. This could be the name
- of a controller (e.g. clusteroperator/etcd) or
- an administrator managing the hook.
+ description: |-
+ Owner defines the owner of the lifecycle hook.
+ This should be descriptive enough so that users can identify
+ who/what is responsible for blocking the lifecycle.
+ This could be the name of a controller (e.g. clusteroperator/etcd)
+ or an administrator managing the hook.
maxLength: 512
minLength: 3
type: string
@@ -289,30 +309,30 @@ spec:
- name
x-kubernetes-list-type: map
preTerminate:
- description: PreTerminate hooks prevent the machine from
- being terminated. PreTerminate hooks be actioned after
- the Machine has been drained.
+ description: |-
+ PreTerminate hooks prevent the machine from being terminated.
+ PreTerminate hooks be actioned after the Machine has been drained.
items:
description: LifecycleHook represents a single instance
of a lifecycle hook
properties:
name:
- description: Name defines a unique name for the
- lifcycle hook. The name should be unique and descriptive,
- ideally 1-3 words, in CamelCase or it may be namespaced,
- eg. foo.example.com/CamelCase. Names must be unique
- and should only be managed by a single entity.
+ description: |-
+ Name defines a unique name for the lifcycle hook.
+ The name should be unique and descriptive, ideally 1-3 words, in CamelCase or
+ it may be namespaced, eg. foo.example.com/CamelCase.
+ Names must be unique and should only be managed by a single entity.
maxLength: 256
minLength: 3
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
owner:
- description: Owner defines the owner of the lifecycle
- hook. This should be descriptive enough so that
- users can identify who/what is responsible for
- blocking the lifecycle. This could be the name
- of a controller (e.g. clusteroperator/etcd) or
- an administrator managing the hook.
+ description: |-
+ Owner defines the owner of the lifecycle hook.
+ This should be descriptive enough so that users can identify
+ who/what is responsible for blocking the lifecycle.
+ This could be the name of a controller (e.g. clusteroperator/etcd)
+ or an administrator managing the hook.
maxLength: 512
minLength: 3
type: string
@@ -326,101 +346,111 @@ spec:
x-kubernetes-list-type: map
type: object
metadata:
- description: ObjectMeta will autopopulate the Node created.
- Use this to indicate what labels, annotations, name prefix,
- etc., should be used when creating the Node.
+ description: |-
+ ObjectMeta will autopopulate the Node created. Use this to
+ indicate what labels, annotations, name prefix, etc., should be used
+ when creating the Node.
properties:
annotations:
additionalProperties:
type: string
- description: 'Annotations is an unstructured key value
- map stored with a resource that may be set by external
- tools to store and retrieve arbitrary metadata. They
- are not queryable and should be preserved when modifying
- objects. More info: http://kubernetes.io/docs/user-guide/annotations'
+ description: |-
+ Annotations is an unstructured key value map stored with a resource that may be
+ set by external tools to store and retrieve arbitrary metadata. They are not
+ queryable and should be preserved when modifying objects.
+ More info: http://kubernetes.io/docs/user-guide/annotations
type: object
generateName:
- description: "GenerateName is an optional prefix, used
- by the server, to generate a unique name ONLY IF the
- Name field has not been provided. If this field is used,
- the name returned to the client will be different than
- the name passed. This value will also be combined with
- a unique suffix. The provided value has the same validation
- rules as the Name field, and may be truncated by the
- length of the suffix required to make the value unique
- on the server. \n If this field is specified and the
- generated name exists, the server will NOT return a
- 409 - instead, it will either return 201 Created or
- 500 with Reason ServerTimeout indicating a unique name
- could not be found in the time allotted, and the client
- should retry (optionally after the time indicated in
- the Retry-After header). \n Applied only if Name is
- not specified. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency"
+ description: |-
+ GenerateName is an optional prefix, used by the server, to generate a unique
+ name ONLY IF the Name field has not been provided.
+ If this field is used, the name returned to the client will be different
+ than the name passed. This value will also be combined with a unique suffix.
+ The provided value has the same validation rules as the Name field,
+ and may be truncated by the length of the suffix required to make the value
+ unique on the server.
+
+ If this field is specified and the generated name exists, the server will
+ NOT return a 409 - instead, it will either return 201 Created or 500 with Reason
+ ServerTimeout indicating a unique name could not be found in the time allotted, and the client
+ should retry (optionally after the time indicated in the Retry-After header).
+
+ Applied only if Name is not specified.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
type: string
labels:
additionalProperties:
type: string
- description: 'Map of string keys and values that can be
- used to organize and categorize (scope and select) objects.
- May match selectors of replication controllers and services.
- More info: http://kubernetes.io/docs/user-guide/labels'
+ description: |-
+ Map of string keys and values that can be used to organize and categorize
+ (scope and select) objects. May match selectors of replication controllers
+ and services.
+ More info: http://kubernetes.io/docs/user-guide/labels
type: object
name:
- description: 'Name must be unique within a namespace.
- Is required when creating resources, although some resources
- may allow a client to request the generation of an appropriate
- name automatically. Name is primarily intended for creation
- idempotence and configuration definition. Cannot be
- updated. More info: http://kubernetes.io/docs/user-guide/identifiers#names'
+ description: |-
+ Name must be unique within a namespace. Is required when creating resources, although
+ some resources may allow a client to request the generation of an appropriate name
+ automatically. Name is primarily intended for creation idempotence and configuration
+ definition.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/identifiers#names
type: string
namespace:
- description: "Namespace defines the space within each
- name must be unique. An empty namespace is equivalent
- to the \"default\" namespace, but \"default\" is the
- canonical representation. Not all objects are required
- to be scoped to a namespace - the value of this field
- for those objects will be empty. \n Must be a DNS_LABEL.
- Cannot be updated. More info: http://kubernetes.io/docs/user-guide/namespaces"
+ description: |-
+ Namespace defines the space within each name must be unique. An empty namespace is
+ equivalent to the "default" namespace, but "default" is the canonical representation.
+ Not all objects are required to be scoped to a namespace - the value of this field for
+ those objects will be empty.
+
+ Must be a DNS_LABEL.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/namespaces
type: string
ownerReferences:
- description: List of objects depended by this object.
- If ALL objects in the list have been deleted, this object
- will be garbage collected. If this object is managed
- by a controller, then an entry in this list will point
- to this controller, with the controller field set to
- true. There cannot be more than one managing controller.
+ description: |-
+ List of objects depended by this object. If ALL objects in the list have
+ been deleted, this object will be garbage collected. If this object is managed by a controller,
+ then an entry in this list will point to this controller, with the controller field set to true.
+ There cannot be more than one managing controller.
items:
- description: OwnerReference contains enough information
- to let you identify an owning object. An owning object
- must be in the same namespace as the dependent, or
+ description: |-
+ OwnerReference contains enough information to let you identify an owning
+ object. An owning object must be in the same namespace as the dependent, or
be cluster-scoped, so there is no namespace field.
properties:
apiVersion:
description: API version of the referent.
type: string
blockOwnerDeletion:
- description: If true, AND if the owner has the "foregroundDeletion"
- finalizer, then the owner cannot be deleted from
- the key-value store until this reference is removed.
+ description: |-
+ If true, AND if the owner has the "foregroundDeletion" finalizer, then
+ the owner cannot be deleted from the key-value store until this
+ reference is removed.
See https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
- for how the garbage collector interacts with this
- field and enforces the foreground deletion. Defaults
- to false. To set this field, a user needs "delete"
- permission of the owner, otherwise 422 (Unprocessable
- Entity) will be returned.
+ for how the garbage collector interacts with this field and enforces the foreground deletion.
+ Defaults to false.
+ To set this field, a user needs "delete" permission of the owner,
+ otherwise 422 (Unprocessable Entity) will be returned.
type: boolean
controller:
description: If true, this reference points to the
managing controller.
type: boolean
kind:
- description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind of the referent.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
- description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names'
+ description: |-
+ Name of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names
type: string
uid:
- description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids'
+ description: |-
+ UID of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids
type: string
required:
- apiVersion
@@ -435,62 +465,58 @@ spec:
x-kubernetes-list-type: map
type: object
providerID:
- description: ProviderID is the identification ID of the machine
- provided by the provider. This field must match the provider
- ID as seen on the node object corresponding to this machine.
- This field is required by higher level consumers of cluster-api.
- Example use case is cluster autoscaler with cluster-api
- as provider. Clean-up logic in the autoscaler compares machines
- to nodes to find out machines at provider which could not
- get registered as Kubernetes nodes. With cluster-api as
- a generic out-of-tree provider for autoscaler, this field
- is required by autoscaler to be able to have a provider
- view of the list of machines. Another list of nodes is queried
- from the k8s apiserver and then a comparison is done to
- find out unregistered machines and are marked for delete.
- This field will be set by the actuators and consumed by
- higher level entities like autoscaler that will be interfacing
- with cluster-api as generic provider.
+ description: |-
+ ProviderID is the identification ID of the machine provided by the provider.
+ This field must match the provider ID as seen on the node object corresponding to this machine.
+ This field is required by higher level consumers of cluster-api. Example use case is cluster autoscaler
+ with cluster-api as provider. Clean-up logic in the autoscaler compares machines to nodes to find out
+ machines at provider which could not get registered as Kubernetes nodes. With cluster-api as a
+ generic out-of-tree provider for autoscaler, this field is required by autoscaler to be
+ able to have a provider view of the list of machines. Another list of nodes is queried from the k8s apiserver
+ and then a comparison is done to find out unregistered machines and are marked for delete.
+ This field will be set by the actuators and consumed by higher level entities like autoscaler that will
+ be interfacing with cluster-api as generic provider.
type: string
providerSpec:
description: ProviderSpec details Provider-specific configuration
to use during node creation.
properties:
value:
- description: Value is an inlined, serialized representation
- of the resource configuration. It is recommended that
- providers maintain their own versioned API types that
- should be serialized/deserialized from this field, akin
- to component config.
+ description: |-
+ Value is an inlined, serialized representation of the resource
+ configuration. It is recommended that providers maintain their own
+ versioned API types that should be serialized/deserialized from this
+ field, akin to component config.
type: object
x-kubernetes-preserve-unknown-fields: true
type: object
taints:
- description: The list of the taints to be applied to the corresponding
- Node in additive manner. This list will not overwrite any
- other taints added to the Node on an ongoing basis by other
- entities. These taints should be actively reconciled e.g.
- if you ask the machine controller to apply a taint and then
- manually remove the taint the machine controller will put
- it back) but not have the machine controller remove any
- taints
+ description: |-
+ The list of the taints to be applied to the corresponding Node in additive
+ manner. This list will not overwrite any other taints added to the Node on
+ an ongoing basis by other entities. These taints should be actively reconciled
+ e.g. if you ask the machine controller to apply a taint and then manually remove
+ the taint the machine controller will put it back) but not have the machine controller
+ remove any taints
items:
- description: The node this Taint is attached to has the
- "effect" on any pod that does not tolerate the Taint.
+ description: |-
+ The node this Taint is attached to has the "effect" on
+ any pod that does not tolerate the Taint.
properties:
effect:
- description: Required. The effect of the taint on pods
- that do not tolerate the taint. Valid effects are
- NoSchedule, PreferNoSchedule and NoExecute.
+ description: |-
+ Required. The effect of the taint on pods
+ that do not tolerate the taint.
+ Valid effects are NoSchedule, PreferNoSchedule and NoExecute.
type: string
key:
description: Required. The taint key to be applied to
a node.
type: string
timeAdded:
- description: TimeAdded represents the time at which
- the taint was added. It is only written for NoExecute
- taints.
+ description: |-
+ TimeAdded represents the time at which the taint was added.
+ It is only written for NoExecute taints.
format: date-time
type: string
value:
@@ -521,39 +547,41 @@ spec:
operational state.
properties:
lastTransitionTime:
- description: Last time the condition transitioned from one status
- to another. This should be when the underlying condition changed.
- If that is not known, then using the time when the API field
- changed is acceptable.
+ description: |-
+ Last time the condition transitioned from one status to another.
+ This should be when the underlying condition changed. If that is not known, then using the time when
+ the API field changed is acceptable.
format: date-time
type: string
message:
- description: A human readable message indicating details about
- the transition. This field may be empty.
+ description: |-
+ A human readable message indicating details about the transition.
+ This field may be empty.
type: string
reason:
- description: The reason for the condition's last transition
- in CamelCase. The specific API may choose whether or not this
- field is considered a guaranteed API. This field may not be
- empty.
+ description: |-
+ The reason for the condition's last transition in CamelCase.
+ The specific API may choose whether or not this field is considered a guaranteed API.
+ This field may not be empty.
type: string
severity:
- description: Severity provides an explicit classification of
- Reason code, so the users or machines can immediately understand
- the current situation and act accordingly. The Severity field
- MUST be set only when Status=False.
+ description: |-
+ Severity provides an explicit classification of Reason code, so the users or machines can immediately
+ understand the current situation and act accordingly.
+ The Severity field MUST be set only when Status=False.
type: string
status:
description: Status of the condition, one of True, False, Unknown.
type: string
type:
- description: Type of condition in CamelCase or in foo.example.com/CamelCase.
- Many .condition.type values are consistent across resources
- like Available, but because arbitrary conditions can be useful
- (see .node.status.conditions), the ability to deconflict is
- important.
+ description: |-
+ Type of condition in CamelCase or in foo.example.com/CamelCase.
+ Many .condition.type values are consistent across resources like Available, but because arbitrary conditions
+ can be useful (see .node.status.conditions), the ability to deconflict is important.
type: string
required:
+ - lastTransitionTime
+ - status
- type
type: object
type: array
@@ -563,22 +591,25 @@ spec:
errorMessage:
type: string
errorReason:
- description: "In the event that there is a terminal problem reconciling
- the replicas, both ErrorReason and ErrorMessage will be set. ErrorReason
- will be populated with a succinct value suitable for machine interpretation,
- while ErrorMessage will contain a more verbose string suitable for
- logging and human consumption. \n These fields should not be set
- for transitive errors that a controller faces that are expected
- to be fixed automatically over time (like service outages), but
- instead indicate that something is fundamentally wrong with the
- MachineTemplate's spec or the configuration of the machine controller,
- and that manual intervention is required. Examples of terminal errors
- would be invalid combinations of settings in the spec, values that
- are unsupported by the machine controller, or the responsible machine
- controller itself being critically misconfigured. \n Any transient
- errors that occur during the reconciliation of Machines can be added
- as events to the MachineSet object and/or logged in the controller's
- output."
+ description: |-
+ In the event that there is a terminal problem reconciling the
+ replicas, both ErrorReason and ErrorMessage will be set. ErrorReason
+ will be populated with a succinct value suitable for machine
+ interpretation, while ErrorMessage will contain a more verbose
+ string suitable for logging and human consumption.
+
+ These fields should not be set for transitive errors that a
+ controller faces that are expected to be fixed automatically over
+ time (like service outages), but instead indicate that something is
+ fundamentally wrong with the MachineTemplate's spec or the configuration of
+ the machine controller, and that manual intervention is required. Examples
+ of terminal errors would be invalid combinations of settings in the
+ spec, values that are unsupported by the machine controller, or the
+ responsible machine controller itself being critically misconfigured.
+
+ Any transient errors that occur during the reconciliation of Machines
+ can be added as events to the MachineSet object and/or logged in the
+ controller's output.
type: string
fullyLabeledReplicas:
description: The number of replicas that have labels matching the
diff --git a/vendor/github.com/openshift/api/machine/v1beta1/zz_generated.crd-manifests/0000_10_machine-api_01_machinesets-TechPreviewNoUpgrade.crd.yaml b/vendor/github.com/openshift/api/machine/v1beta1/zz_generated.crd-manifests/0000_10_machine-api_01_machinesets-TechPreviewNoUpgrade.crd.yaml
index 1bba55e3d56d914dc5f4d285131685a9263ce9f0..a218da06c15d70374a657242d306b23e592ac86c 100644
--- a/vendor/github.com/openshift/api/machine/v1beta1/zz_generated.crd-manifests/0000_10_machine-api_01_machinesets-TechPreviewNoUpgrade.crd.yaml
+++ b/vendor/github.com/openshift/api/machine/v1beta1/zz_generated.crd-manifests/0000_10_machine-api_01_machinesets-TechPreviewNoUpgrade.crd.yaml
@@ -42,19 +42,24 @@ spec:
name: v1beta1
schema:
openAPIV3Schema:
- description: 'MachineSet ensures that a specified number of machines replicas
- are running at any given time. Compatibility level 2: Stable within a major
- release for a minimum of 9 months or 3 minor releases (whichever is longer).'
+ description: |-
+ MachineSet ensures that a specified number of machines replicas are running at any given time.
+ Compatibility level 2: Stable within a major release for a minimum of 9 months or 3 minor releases (whichever is longer).
properties:
apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ description: |-
+ APIVersion defines the versioned schema of this representation of an object.
+ Servers should convert recognized schemas to the latest internal value, and
+ may reject unrecognized values.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind is a string value representing the REST resource this object represents.
+ Servers may infer this from the endpoint the client submits requests to.
+ Cannot be updated.
+ In CamelCase.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
@@ -62,55 +67,57 @@ spec:
description: MachineSetSpec defines the desired state of MachineSet
properties:
deletePolicy:
- description: DeletePolicy defines the policy used to identify nodes
- to delete when downscaling. Defaults to "Random". Valid values
- are "Random, "Newest", "Oldest"
+ description: |-
+ DeletePolicy defines the policy used to identify nodes to delete when downscaling.
+ Defaults to "Random". Valid values are "Random, "Newest", "Oldest"
enum:
- Random
- Newest
- Oldest
type: string
minReadySeconds:
- description: MinReadySeconds is the minimum number of seconds for
- which a newly created machine should be ready. Defaults to 0 (machine
- will be considered available as soon as it is ready)
+ description: |-
+ MinReadySeconds is the minimum number of seconds for which a newly created machine should be ready.
+ Defaults to 0 (machine will be considered available as soon as it is ready)
format: int32
type: integer
replicas:
default: 1
- description: Replicas is the number of desired replicas. This is a
- pointer to distinguish between explicit zero and unspecified. Defaults
- to 1.
+ description: |-
+ Replicas is the number of desired replicas.
+ This is a pointer to distinguish between explicit zero and unspecified.
+ Defaults to 1.
format: int32
type: integer
selector:
- description: 'Selector is a label query over machines that should
- match the replica count. Label keys and values that must match in
- order to be controlled by this MachineSet. It must match the machine
- template''s labels. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors'
+ description: |-
+ Selector is a label query over machines that should match the replica count.
+ Label keys and values that must match in order to be controlled by this MachineSet.
+ It must match the machine template's labels.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors
properties:
matchExpressions:
description: matchExpressions is a list of label selector requirements.
The requirements are ANDed.
items:
- description: A label selector requirement is a selector that
- contains values, a key, and an operator that relates the key
- and values.
+ description: |-
+ A label selector requirement is a selector that contains values, a key, and an operator that
+ relates the key and values.
properties:
key:
description: key is the label key that the selector applies
to.
type: string
operator:
- description: operator represents a key's relationship to
- a set of values. Valid operators are In, NotIn, Exists
- and DoesNotExist.
+ description: |-
+ operator represents a key's relationship to a set of values.
+ Valid operators are In, NotIn, Exists and DoesNotExist.
type: string
values:
- description: values is an array of string values. If the
- operator is In or NotIn, the values array must be non-empty.
- If the operator is Exists or DoesNotExist, the values
- array must be empty. This array is replaced during a strategic
+ description: |-
+ values is an array of string values. If the operator is In or NotIn,
+ the values array must be non-empty. If the operator is Exists or DoesNotExist,
+ the values array must be empty. This array is replaced during a strategic
merge patch.
items:
type: string
@@ -125,111 +132,123 @@ spec:
matchLabels:
additionalProperties:
type: string
- description: matchLabels is a map of {key,value} pairs. A single
- {key,value} in the matchLabels map is equivalent to an element
- of matchExpressions, whose key field is "key", the operator
- is "In", and the values array contains only "value". The requirements
- are ANDed.
+ description: |-
+ matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
+ map is equivalent to an element of matchExpressions, whose key field is "key", the
+ operator is "In", and the values array contains only "value". The requirements are ANDed.
type: object
type: object
x-kubernetes-map-type: atomic
template:
- description: Template is the object that describes the machine that
- will be created if insufficient replicas are detected.
+ description: |-
+ Template is the object that describes the machine that will be created if
+ insufficient replicas are detected.
properties:
metadata:
- description: 'Standard object''s metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata'
+ description: |-
+ Standard object's metadata.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
properties:
annotations:
additionalProperties:
type: string
- description: 'Annotations is an unstructured key value map
- stored with a resource that may be set by external tools
- to store and retrieve arbitrary metadata. They are not queryable
- and should be preserved when modifying objects. More info:
- http://kubernetes.io/docs/user-guide/annotations'
+ description: |-
+ Annotations is an unstructured key value map stored with a resource that may be
+ set by external tools to store and retrieve arbitrary metadata. They are not
+ queryable and should be preserved when modifying objects.
+ More info: http://kubernetes.io/docs/user-guide/annotations
type: object
generateName:
- description: "GenerateName is an optional prefix, used by
- the server, to generate a unique name ONLY IF the Name field
- has not been provided. If this field is used, the name returned
- to the client will be different than the name passed. This
- value will also be combined with a unique suffix. The provided
- value has the same validation rules as the Name field, and
- may be truncated by the length of the suffix required to
- make the value unique on the server. \n If this field is
- specified and the generated name exists, the server will
- NOT return a 409 - instead, it will either return 201 Created
- or 500 with Reason ServerTimeout indicating a unique name
- could not be found in the time allotted, and the client
- should retry (optionally after the time indicated in the
- Retry-After header). \n Applied only if Name is not specified.
- More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency"
+ description: |-
+ GenerateName is an optional prefix, used by the server, to generate a unique
+ name ONLY IF the Name field has not been provided.
+ If this field is used, the name returned to the client will be different
+ than the name passed. This value will also be combined with a unique suffix.
+ The provided value has the same validation rules as the Name field,
+ and may be truncated by the length of the suffix required to make the value
+ unique on the server.
+
+ If this field is specified and the generated name exists, the server will
+ NOT return a 409 - instead, it will either return 201 Created or 500 with Reason
+ ServerTimeout indicating a unique name could not be found in the time allotted, and the client
+ should retry (optionally after the time indicated in the Retry-After header).
+
+ Applied only if Name is not specified.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
type: string
labels:
additionalProperties:
type: string
- description: 'Map of string keys and values that can be used
- to organize and categorize (scope and select) objects. May
- match selectors of replication controllers and services.
- More info: http://kubernetes.io/docs/user-guide/labels'
+ description: |-
+ Map of string keys and values that can be used to organize and categorize
+ (scope and select) objects. May match selectors of replication controllers
+ and services.
+ More info: http://kubernetes.io/docs/user-guide/labels
type: object
name:
- description: 'Name must be unique within a namespace. Is required
- when creating resources, although some resources may allow
- a client to request the generation of an appropriate name
- automatically. Name is primarily intended for creation idempotence
- and configuration definition. Cannot be updated. More info:
- http://kubernetes.io/docs/user-guide/identifiers#names'
+ description: |-
+ Name must be unique within a namespace. Is required when creating resources, although
+ some resources may allow a client to request the generation of an appropriate name
+ automatically. Name is primarily intended for creation idempotence and configuration
+ definition.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/identifiers#names
type: string
namespace:
- description: "Namespace defines the space within each name
- must be unique. An empty namespace is equivalent to the
- \"default\" namespace, but \"default\" is the canonical
- representation. Not all objects are required to be scoped
- to a namespace - the value of this field for those objects
- will be empty. \n Must be a DNS_LABEL. Cannot be updated.
- More info: http://kubernetes.io/docs/user-guide/namespaces"
+ description: |-
+ Namespace defines the space within each name must be unique. An empty namespace is
+ equivalent to the "default" namespace, but "default" is the canonical representation.
+ Not all objects are required to be scoped to a namespace - the value of this field for
+ those objects will be empty.
+
+ Must be a DNS_LABEL.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/namespaces
type: string
ownerReferences:
- description: List of objects depended by this object. If ALL
- objects in the list have been deleted, this object will
- be garbage collected. If this object is managed by a controller,
- then an entry in this list will point to this controller,
- with the controller field set to true. There cannot be more
- than one managing controller.
+ description: |-
+ List of objects depended by this object. If ALL objects in the list have
+ been deleted, this object will be garbage collected. If this object is managed by a controller,
+ then an entry in this list will point to this controller, with the controller field set to true.
+ There cannot be more than one managing controller.
items:
- description: OwnerReference contains enough information
- to let you identify an owning object. An owning object
- must be in the same namespace as the dependent, or be
- cluster-scoped, so there is no namespace field.
+ description: |-
+ OwnerReference contains enough information to let you identify an owning
+ object. An owning object must be in the same namespace as the dependent, or
+ be cluster-scoped, so there is no namespace field.
properties:
apiVersion:
description: API version of the referent.
type: string
blockOwnerDeletion:
- description: If true, AND if the owner has the "foregroundDeletion"
- finalizer, then the owner cannot be deleted from the
- key-value store until this reference is removed. See
- https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
- for how the garbage collector interacts with this
- field and enforces the foreground deletion. Defaults
- to false. To set this field, a user needs "delete"
- permission of the owner, otherwise 422 (Unprocessable
- Entity) will be returned.
+ description: |-
+ If true, AND if the owner has the "foregroundDeletion" finalizer, then
+ the owner cannot be deleted from the key-value store until this
+ reference is removed.
+ See https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
+ for how the garbage collector interacts with this field and enforces the foreground deletion.
+ Defaults to false.
+ To set this field, a user needs "delete" permission of the owner,
+ otherwise 422 (Unprocessable Entity) will be returned.
type: boolean
controller:
description: If true, this reference points to the managing
controller.
type: boolean
kind:
- description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind of the referent.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
- description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names'
+ description: |-
+ Name of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names
type: string
uid:
- description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids'
+ description: |-
+ UID of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids
type: string
required:
- apiVersion
@@ -244,39 +263,40 @@ spec:
x-kubernetes-list-type: map
type: object
spec:
- description: 'Specification of the desired behavior of the machine.
- More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status'
+ description: |-
+ Specification of the desired behavior of the machine.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
properties:
lifecycleHooks:
- description: LifecycleHooks allow users to pause operations
- on the machine at certain predefined points within the machine
- lifecycle.
+ description: |-
+ LifecycleHooks allow users to pause operations on the machine at
+ certain predefined points within the machine lifecycle.
properties:
preDrain:
- description: PreDrain hooks prevent the machine from being
- drained. This also blocks further lifecycle events,
- such as termination.
+ description: |-
+ PreDrain hooks prevent the machine from being drained.
+ This also blocks further lifecycle events, such as termination.
items:
description: LifecycleHook represents a single instance
of a lifecycle hook
properties:
name:
- description: Name defines a unique name for the
- lifcycle hook. The name should be unique and descriptive,
- ideally 1-3 words, in CamelCase or it may be namespaced,
- eg. foo.example.com/CamelCase. Names must be unique
- and should only be managed by a single entity.
+ description: |-
+ Name defines a unique name for the lifcycle hook.
+ The name should be unique and descriptive, ideally 1-3 words, in CamelCase or
+ it may be namespaced, eg. foo.example.com/CamelCase.
+ Names must be unique and should only be managed by a single entity.
maxLength: 256
minLength: 3
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
owner:
- description: Owner defines the owner of the lifecycle
- hook. This should be descriptive enough so that
- users can identify who/what is responsible for
- blocking the lifecycle. This could be the name
- of a controller (e.g. clusteroperator/etcd) or
- an administrator managing the hook.
+ description: |-
+ Owner defines the owner of the lifecycle hook.
+ This should be descriptive enough so that users can identify
+ who/what is responsible for blocking the lifecycle.
+ This could be the name of a controller (e.g. clusteroperator/etcd)
+ or an administrator managing the hook.
maxLength: 512
minLength: 3
type: string
@@ -289,30 +309,30 @@ spec:
- name
x-kubernetes-list-type: map
preTerminate:
- description: PreTerminate hooks prevent the machine from
- being terminated. PreTerminate hooks be actioned after
- the Machine has been drained.
+ description: |-
+ PreTerminate hooks prevent the machine from being terminated.
+ PreTerminate hooks be actioned after the Machine has been drained.
items:
description: LifecycleHook represents a single instance
of a lifecycle hook
properties:
name:
- description: Name defines a unique name for the
- lifcycle hook. The name should be unique and descriptive,
- ideally 1-3 words, in CamelCase or it may be namespaced,
- eg. foo.example.com/CamelCase. Names must be unique
- and should only be managed by a single entity.
+ description: |-
+ Name defines a unique name for the lifcycle hook.
+ The name should be unique and descriptive, ideally 1-3 words, in CamelCase or
+ it may be namespaced, eg. foo.example.com/CamelCase.
+ Names must be unique and should only be managed by a single entity.
maxLength: 256
minLength: 3
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
type: string
owner:
- description: Owner defines the owner of the lifecycle
- hook. This should be descriptive enough so that
- users can identify who/what is responsible for
- blocking the lifecycle. This could be the name
- of a controller (e.g. clusteroperator/etcd) or
- an administrator managing the hook.
+ description: |-
+ Owner defines the owner of the lifecycle hook.
+ This should be descriptive enough so that users can identify
+ who/what is responsible for blocking the lifecycle.
+ This could be the name of a controller (e.g. clusteroperator/etcd)
+ or an administrator managing the hook.
maxLength: 512
minLength: 3
type: string
@@ -326,101 +346,111 @@ spec:
x-kubernetes-list-type: map
type: object
metadata:
- description: ObjectMeta will autopopulate the Node created.
- Use this to indicate what labels, annotations, name prefix,
- etc., should be used when creating the Node.
+ description: |-
+ ObjectMeta will autopopulate the Node created. Use this to
+ indicate what labels, annotations, name prefix, etc., should be used
+ when creating the Node.
properties:
annotations:
additionalProperties:
type: string
- description: 'Annotations is an unstructured key value
- map stored with a resource that may be set by external
- tools to store and retrieve arbitrary metadata. They
- are not queryable and should be preserved when modifying
- objects. More info: http://kubernetes.io/docs/user-guide/annotations'
+ description: |-
+ Annotations is an unstructured key value map stored with a resource that may be
+ set by external tools to store and retrieve arbitrary metadata. They are not
+ queryable and should be preserved when modifying objects.
+ More info: http://kubernetes.io/docs/user-guide/annotations
type: object
generateName:
- description: "GenerateName is an optional prefix, used
- by the server, to generate a unique name ONLY IF the
- Name field has not been provided. If this field is used,
- the name returned to the client will be different than
- the name passed. This value will also be combined with
- a unique suffix. The provided value has the same validation
- rules as the Name field, and may be truncated by the
- length of the suffix required to make the value unique
- on the server. \n If this field is specified and the
- generated name exists, the server will NOT return a
- 409 - instead, it will either return 201 Created or
- 500 with Reason ServerTimeout indicating a unique name
- could not be found in the time allotted, and the client
- should retry (optionally after the time indicated in
- the Retry-After header). \n Applied only if Name is
- not specified. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency"
+ description: |-
+ GenerateName is an optional prefix, used by the server, to generate a unique
+ name ONLY IF the Name field has not been provided.
+ If this field is used, the name returned to the client will be different
+ than the name passed. This value will also be combined with a unique suffix.
+ The provided value has the same validation rules as the Name field,
+ and may be truncated by the length of the suffix required to make the value
+ unique on the server.
+
+ If this field is specified and the generated name exists, the server will
+ NOT return a 409 - instead, it will either return 201 Created or 500 with Reason
+ ServerTimeout indicating a unique name could not be found in the time allotted, and the client
+ should retry (optionally after the time indicated in the Retry-After header).
+
+ Applied only if Name is not specified.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
type: string
labels:
additionalProperties:
type: string
- description: 'Map of string keys and values that can be
- used to organize and categorize (scope and select) objects.
- May match selectors of replication controllers and services.
- More info: http://kubernetes.io/docs/user-guide/labels'
+ description: |-
+ Map of string keys and values that can be used to organize and categorize
+ (scope and select) objects. May match selectors of replication controllers
+ and services.
+ More info: http://kubernetes.io/docs/user-guide/labels
type: object
name:
- description: 'Name must be unique within a namespace.
- Is required when creating resources, although some resources
- may allow a client to request the generation of an appropriate
- name automatically. Name is primarily intended for creation
- idempotence and configuration definition. Cannot be
- updated. More info: http://kubernetes.io/docs/user-guide/identifiers#names'
+ description: |-
+ Name must be unique within a namespace. Is required when creating resources, although
+ some resources may allow a client to request the generation of an appropriate name
+ automatically. Name is primarily intended for creation idempotence and configuration
+ definition.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/identifiers#names
type: string
namespace:
- description: "Namespace defines the space within each
- name must be unique. An empty namespace is equivalent
- to the \"default\" namespace, but \"default\" is the
- canonical representation. Not all objects are required
- to be scoped to a namespace - the value of this field
- for those objects will be empty. \n Must be a DNS_LABEL.
- Cannot be updated. More info: http://kubernetes.io/docs/user-guide/namespaces"
+ description: |-
+ Namespace defines the space within each name must be unique. An empty namespace is
+ equivalent to the "default" namespace, but "default" is the canonical representation.
+ Not all objects are required to be scoped to a namespace - the value of this field for
+ those objects will be empty.
+
+ Must be a DNS_LABEL.
+ Cannot be updated.
+ More info: http://kubernetes.io/docs/user-guide/namespaces
type: string
ownerReferences:
- description: List of objects depended by this object.
- If ALL objects in the list have been deleted, this object
- will be garbage collected. If this object is managed
- by a controller, then an entry in this list will point
- to this controller, with the controller field set to
- true. There cannot be more than one managing controller.
+ description: |-
+ List of objects depended by this object. If ALL objects in the list have
+ been deleted, this object will be garbage collected. If this object is managed by a controller,
+ then an entry in this list will point to this controller, with the controller field set to true.
+ There cannot be more than one managing controller.
items:
- description: OwnerReference contains enough information
- to let you identify an owning object. An owning object
- must be in the same namespace as the dependent, or
+ description: |-
+ OwnerReference contains enough information to let you identify an owning
+ object. An owning object must be in the same namespace as the dependent, or
be cluster-scoped, so there is no namespace field.
properties:
apiVersion:
description: API version of the referent.
type: string
blockOwnerDeletion:
- description: If true, AND if the owner has the "foregroundDeletion"
- finalizer, then the owner cannot be deleted from
- the key-value store until this reference is removed.
+ description: |-
+ If true, AND if the owner has the "foregroundDeletion" finalizer, then
+ the owner cannot be deleted from the key-value store until this
+ reference is removed.
See https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
- for how the garbage collector interacts with this
- field and enforces the foreground deletion. Defaults
- to false. To set this field, a user needs "delete"
- permission of the owner, otherwise 422 (Unprocessable
- Entity) will be returned.
+ for how the garbage collector interacts with this field and enforces the foreground deletion.
+ Defaults to false.
+ To set this field, a user needs "delete" permission of the owner,
+ otherwise 422 (Unprocessable Entity) will be returned.
type: boolean
controller:
description: If true, this reference points to the
managing controller.
type: boolean
kind:
- description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ description: |-
+ Kind of the referent.
+ More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
name:
- description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names'
+ description: |-
+ Name of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#names
type: string
uid:
- description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids'
+ description: |-
+ UID of the referent.
+ More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uids
type: string
required:
- apiVersion
@@ -435,62 +465,58 @@ spec:
x-kubernetes-list-type: map
type: object
providerID:
- description: ProviderID is the identification ID of the machine
- provided by the provider. This field must match the provider
- ID as seen on the node object corresponding to this machine.
- This field is required by higher level consumers of cluster-api.
- Example use case is cluster autoscaler with cluster-api
- as provider. Clean-up logic in the autoscaler compares machines
- to nodes to find out machines at provider which could not
- get registered as Kubernetes nodes. With cluster-api as
- a generic out-of-tree provider for autoscaler, this field
- is required by autoscaler to be able to have a provider
- view of the list of machines. Another list of nodes is queried
- from the k8s apiserver and then a comparison is done to
- find out unregistered machines and are marked for delete.
- This field will be set by the actuators and consumed by
- higher level entities like autoscaler that will be interfacing
- with cluster-api as generic provider.
+ description: |-
+ ProviderID is the identification ID of the machine provided by the provider.
+ This field must match the provider ID as seen on the node object corresponding to this machine.
+ This field is required by higher level consumers of cluster-api. Example use case is cluster autoscaler
+ with cluster-api as provider. Clean-up logic in the autoscaler compares machines to nodes to find out
+ machines at provider which could not get registered as Kubernetes nodes. With cluster-api as a
+ generic out-of-tree provider for autoscaler, this field is required by autoscaler to be
+ able to have a provider view of the list of machines. Another list of nodes is queried from the k8s apiserver
+ and then a comparison is done to find out unregistered machines and are marked for delete.
+ This field will be set by the actuators and consumed by higher level entities like autoscaler that will
+ be interfacing with cluster-api as generic provider.
type: string
providerSpec:
description: ProviderSpec details Provider-specific configuration
to use during node creation.
properties:
value:
- description: Value is an inlined, serialized representation
- of the resource configuration. It is recommended that
- providers maintain their own versioned API types that
- should be serialized/deserialized from this field, akin
- to component config.
+ description: |-
+ Value is an inlined, serialized representation of the resource
+ configuration. It is recommended that providers maintain their own
+ versioned API types that should be serialized/deserialized from this
+ field, akin to component config.
type: object
x-kubernetes-preserve-unknown-fields: true
type: object
taints:
- description: The list of the taints to be applied to the corresponding
- Node in additive manner. This list will not overwrite any
- other taints added to the Node on an ongoing basis by other
- entities. These taints should be actively reconciled e.g.
- if you ask the machine controller to apply a taint and then
- manually remove the taint the machine controller will put
- it back) but not have the machine controller remove any
- taints
+ description: |-
+ The list of the taints to be applied to the corresponding Node in additive
+ manner. This list will not overwrite any other taints added to the Node on
+ an ongoing basis by other entities. These taints should be actively reconciled
+ e.g. if you ask the machine controller to apply a taint and then manually remove
+ the taint the machine controller will put it back) but not have the machine controller
+ remove any taints
items:
- description: The node this Taint is attached to has the
- "effect" on any pod that does not tolerate the Taint.
+ description: |-
+ The node this Taint is attached to has the "effect" on
+ any pod that does not tolerate the Taint.
properties:
effect:
- description: Required. The effect of the taint on pods
- that do not tolerate the taint. Valid effects are
- NoSchedule, PreferNoSchedule and NoExecute.
+ description: |-
+ Required. The effect of the taint on pods
+ that do not tolerate the taint.
+ Valid effects are NoSchedule, PreferNoSchedule and NoExecute.
type: string
key:
description: Required. The taint key to be applied to
a node.
type: string
timeAdded:
- description: TimeAdded represents the time at which
- the taint was added. It is only written for NoExecute
- taints.
+ description: |-
+ TimeAdded represents the time at which the taint was added.
+ It is only written for NoExecute taints.
format: date-time
type: string
value:
@@ -521,39 +547,41 @@ spec:
operational state.
properties:
lastTransitionTime:
- description: Last time the condition transitioned from one status
- to another. This should be when the underlying condition changed.
- If that is not known, then using the time when the API field
- changed is acceptable.
+ description: |-
+ Last time the condition transitioned from one status to another.
+ This should be when the underlying condition changed. If that is not known, then using the time when
+ the API field changed is acceptable.
format: date-time
type: string
message:
- description: A human readable message indicating details about
- the transition. This field may be empty.
+ description: |-
+ A human readable message indicating details about the transition.
+ This field may be empty.
type: string
reason:
- description: The reason for the condition's last transition
- in CamelCase. The specific API may choose whether or not this
- field is considered a guaranteed API. This field may not be
- empty.
+ description: |-
+ The reason for the condition's last transition in CamelCase.
+ The specific API may choose whether or not this field is considered a guaranteed API.
+ This field may not be empty.
type: string
severity:
- description: Severity provides an explicit classification of
- Reason code, so the users or machines can immediately understand
- the current situation and act accordingly. The Severity field
- MUST be set only when Status=False.
+ description: |-
+ Severity provides an explicit classification of Reason code, so the users or machines can immediately
+ understand the current situation and act accordingly.
+ The Severity field MUST be set only when Status=False.
type: string
status:
description: Status of the condition, one of True, False, Unknown.
type: string
type:
- description: Type of condition in CamelCase or in foo.example.com/CamelCase.
- Many .condition.type values are consistent across resources
- like Available, but because arbitrary conditions can be useful
- (see .node.status.conditions), the ability to deconflict is
- important.
+ description: |-
+ Type of condition in CamelCase or in foo.example.com/CamelCase.
+ Many .condition.type values are consistent across resources like Available, but because arbitrary conditions
+ can be useful (see .node.status.conditions), the ability to deconflict is important.
type: string
required:
+ - lastTransitionTime
+ - status
- type
type: object
type: array
@@ -563,22 +591,25 @@ spec:
errorMessage:
type: string
errorReason:
- description: "In the event that there is a terminal problem reconciling
- the replicas, both ErrorReason and ErrorMessage will be set. ErrorReason
- will be populated with a succinct value suitable for machine interpretation,
- while ErrorMessage will contain a more verbose string suitable for
- logging and human consumption. \n These fields should not be set
- for transitive errors that a controller faces that are expected
- to be fixed automatically over time (like service outages), but
- instead indicate that something is fundamentally wrong with the
- MachineTemplate's spec or the configuration of the machine controller,
- and that manual intervention is required. Examples of terminal errors
- would be invalid combinations of settings in the spec, values that
- are unsupported by the machine controller, or the responsible machine
- controller itself being critically misconfigured. \n Any transient
- errors that occur during the reconciliation of Machines can be added
- as events to the MachineSet object and/or logged in the controller's
- output."
+ description: |-
+ In the event that there is a terminal problem reconciling the
+ replicas, both ErrorReason and ErrorMessage will be set. ErrorReason
+ will be populated with a succinct value suitable for machine
+ interpretation, while ErrorMessage will contain a more verbose
+ string suitable for logging and human consumption.
+
+ These fields should not be set for transitive errors that a
+ controller faces that are expected to be fixed automatically over
+ time (like service outages), but instead indicate that something is
+ fundamentally wrong with the MachineTemplate's spec or the configuration of
+ the machine controller, and that manual intervention is required. Examples
+ of terminal errors would be invalid combinations of settings in the
+ spec, values that are unsupported by the machine controller, or the
+ responsible machine controller itself being critically misconfigured.
+
+ Any transient errors that occur during the reconciliation of Machines
+ can be added as events to the MachineSet object and/or logged in the
+ controller's output.
type: string
fullyLabeledReplicas:
description: The number of replicas that have labels matching the
diff --git a/vendor/github.com/openshift/api/network/v1/generated.proto b/vendor/github.com/openshift/api/network/v1/generated.proto
index d2e75548bb63fca235ec4b7e57a69ef00ffc8c9f..a429f04c0265296c22f50d34daa0dee6114b911a 100644
--- a/vendor/github.com/openshift/api/network/v1/generated.proto
+++ b/vendor/github.com/openshift/api/network/v1/generated.proto
@@ -27,7 +27,7 @@ option go_package = "github.com/openshift/api/network/v1";
message ClusterNetwork {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// Network is a CIDR string specifying the global overlay network's L3 space
// +kubebuilder:validation:Pattern=`^(([0-9]|[0-9][0-9]|1[0-9][0-9]|2[0-4][0-9]|25[0-5])\.){3}([0-9]|[0-9][0-9]|1[0-9][0-9]|2[0-4][0-9]|25[0-5])/([0-9]|[12][0-9]|3[0-2])$`
@@ -85,7 +85,7 @@ message ClusterNetworkEntry {
message ClusterNetworkList {
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
// Items is the list of cluster networks
repeated ClusterNetwork items = 2;
@@ -104,7 +104,7 @@ message ClusterNetworkList {
message EgressNetworkPolicy {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// spec is the specification of the current egress network policy
optional EgressNetworkPolicySpec spec = 2;
@@ -117,7 +117,7 @@ message EgressNetworkPolicy {
message EgressNetworkPolicyList {
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
// items is the list of policies
repeated EgressNetworkPolicy items = 2;
@@ -170,7 +170,7 @@ message EgressNetworkPolicySpec {
message HostSubnet {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// Host is the name of the node. (This is the same as the object's name, but both fields must be set.)
// +kubebuilder:validation:Pattern=`^[a-z0-9.-]+$`
@@ -204,7 +204,7 @@ message HostSubnet {
message HostSubnetList {
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
// Items is the list of host subnets
repeated HostSubnet items = 2;
@@ -225,7 +225,7 @@ message HostSubnetList {
message NetNamespace {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// NetName is the name of the network namespace. (This is the same as the object's name, but both fields must be set.)
// +kubebuilder:validation:Pattern=`^[a-z0-9.-]+$`
@@ -249,7 +249,7 @@ message NetNamespace {
message NetNamespaceList {
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
// Items is the list of net namespaces
repeated NetNamespace items = 2;
diff --git a/vendor/github.com/openshift/api/networkoperator/v1/generated.proto b/vendor/github.com/openshift/api/networkoperator/v1/generated.proto
index 2f813e2a5eb07dfc36b479658332d43682f01207..37c374557d860e0130f52414bc55893fd11b2c4f 100644
--- a/vendor/github.com/openshift/api/networkoperator/v1/generated.proto
+++ b/vendor/github.com/openshift/api/networkoperator/v1/generated.proto
@@ -40,7 +40,7 @@ option go_package = "github.com/openshift/api/networkoperator/v1";
message EgressRouter {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// Specification of the desired egress router.
// +kubebuilder:validation:Required
@@ -75,7 +75,7 @@ message EgressRouterInterface {
message EgressRouterList {
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
repeated EgressRouter items = 2;
}
@@ -133,7 +133,7 @@ message EgressRouterStatusCondition {
// +kubebuilder:validation:Required
// +required
// +nullable
- optional k8s.io.apimachinery.pkg.apis.meta.v1.Time lastTransitionTime = 3;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.Time lastTransitionTime = 3;
// Reason is the CamelCase reason for the condition's current status.
optional string reason = 4;
diff --git a/vendor/github.com/openshift/api/oauth/v1/generated.proto b/vendor/github.com/openshift/api/oauth/v1/generated.proto
index 829025a83f55267f8d86a130e73acef53d26cc4a..7630d896da1269a428177c6850b3b46123256bf8 100644
--- a/vendor/github.com/openshift/api/oauth/v1/generated.proto
+++ b/vendor/github.com/openshift/api/oauth/v1/generated.proto
@@ -35,7 +35,7 @@ message ClusterRoleScopeRestriction {
message OAuthAccessToken {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// ClientName references the client that created this token.
optional string clientName = 2;
@@ -74,7 +74,7 @@ message OAuthAccessToken {
message OAuthAccessTokenList {
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
// Items is the list of OAuth access tokens
repeated OAuthAccessToken items = 2;
@@ -87,7 +87,7 @@ message OAuthAccessTokenList {
message OAuthAuthorizeToken {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// ClientName references the client that created this token.
optional string clientName = 2;
@@ -125,7 +125,7 @@ message OAuthAuthorizeToken {
message OAuthAuthorizeTokenList {
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
// Items is the list of OAuth authorization tokens
repeated OAuthAuthorizeToken items = 2;
@@ -138,7 +138,7 @@ message OAuthAuthorizeTokenList {
message OAuthClient {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// Secret is the unique secret associated with a client
optional string secret = 2;
@@ -192,7 +192,7 @@ message OAuthClient {
message OAuthClientAuthorization {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// ClientName references the client that created this authorization
optional string clientName = 2;
@@ -215,7 +215,7 @@ message OAuthClientAuthorization {
message OAuthClientAuthorizationList {
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
// Items is the list of OAuth client authorizations
repeated OAuthClientAuthorization items = 2;
@@ -228,7 +228,7 @@ message OAuthClientAuthorizationList {
message OAuthClientList {
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
// Items is the list of OAuth clients
repeated OAuthClient items = 2;
@@ -241,7 +241,7 @@ message OAuthClientList {
message OAuthRedirectReference {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// The reference to an redirect object in the current namespace.
optional RedirectReference reference = 2;
@@ -274,7 +274,7 @@ message ScopeRestriction {
message UserOAuthAccessToken {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// ClientName references the client that created this token.
optional string clientName = 2;
@@ -314,7 +314,7 @@ message UserOAuthAccessToken {
message UserOAuthAccessTokenList {
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
repeated UserOAuthAccessToken items = 2;
}
diff --git a/vendor/github.com/openshift/api/operator/v1/register.go b/vendor/github.com/openshift/api/operator/v1/register.go
index 21919f9a8be60469f01fa7b46fcfe8675dd9f56c..5920c4fca71d0cef0290f6deeab052706171d3ee 100644
--- a/vendor/github.com/openshift/api/operator/v1/register.go
+++ b/vendor/github.com/openshift/api/operator/v1/register.go
@@ -62,6 +62,8 @@ func addKnownTypes(scheme *runtime.Scheme) error {
&OpenShiftAPIServerList{},
&OpenShiftControllerManager{},
&OpenShiftControllerManagerList{},
+ &OLM{},
+ &OLMList{},
&ServiceCA{},
&ServiceCAList{},
&ServiceCatalogAPIServer{},
diff --git a/vendor/github.com/openshift/api/operator/v1/types.go b/vendor/github.com/openshift/api/operator/v1/types.go
index a06f0ca6773a7e89570063d4b9008ab461ee9901..f04b6846aee56e9d5b748981a69a3cb175e3e7f7 100644
--- a/vendor/github.com/openshift/api/operator/v1/types.go
+++ b/vendor/github.com/openshift/api/operator/v1/types.go
@@ -127,6 +127,11 @@ type OperatorStatus struct {
// readyReplicas indicates how many replicas are ready and at the desired state
ReadyReplicas int32 `json:"readyReplicas"`
+ // latestAvailableRevision is the deploymentID of the most recent deployment
+ // +optional
+ // +kubebuilder:validation:XValidation:rule="self >= oldSelf",message="must only increase"
+ LatestAvailableRevision int32 `json:"latestAvailableRevision,omitempty"`
+
// generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.
// +listType=map
// +listMapKey=group
@@ -142,17 +147,27 @@ type GenerationStatus struct {
// group is the group of the thing you're tracking
// +kubebuilder:validation:Required
Group string `json:"group"`
+
// resource is the resource type of the thing you're tracking
// +kubebuilder:validation:Required
Resource string `json:"resource"`
+
// namespace is where the thing you're tracking is
// +kubebuilder:validation:Required
Namespace string `json:"namespace"`
+
// name is the name of the thing you're tracking
// +kubebuilder:validation:Required
Name string `json:"name"`
+
+ // TODO: Add validation for lastGeneration. The value for this field should generally increase, except when the associated
+ // resource has been deleted and re-created. To accurately validate this field, we should introduce a new UID field and only
+ // enforce an increasing value in lastGeneration when the UID remains unchanged. A change in the UID indicates that the resource
+ // was re-created, allowing the lastGeneration value to reset or decrease.
+
// lastGeneration is the last generation of the workload controller involved
LastGeneration int64 `json:"lastGeneration"`
+
// hash is an optional field set for resources without generation that are content sensitive like secrets and configmaps
Hash string `json:"hash"`
}
@@ -173,12 +188,34 @@ var (
// OperatorCondition is just the standard condition fields.
type OperatorCondition struct {
+ // type of condition in CamelCase or in foo.example.com/CamelCase.
+ // ---
+ // Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be
+ // useful (see .node.status.conditions), the ability to deconflict is important.
+ // The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
+ // +required
// +kubebuilder:validation:Required
- Type string `json:"type"`
- Status ConditionStatus `json:"status"`
- LastTransitionTime metav1.Time `json:"lastTransitionTime,omitempty"`
- Reason string `json:"reason,omitempty"`
- Message string `json:"message,omitempty"`
+ // +kubebuilder:validation:Pattern=`^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$`
+ // +kubebuilder:validation:MaxLength=316
+ Type string `json:"type" protobuf:"bytes,1,opt,name=type"`
+
+ // status of the condition, one of True, False, Unknown.
+ // +required
+ // +kubebuilder:validation:Required
+ // +kubebuilder:validation:Enum=True;False;Unknown
+ Status ConditionStatus `json:"status"`
+
+ // lastTransitionTime is the last time the condition transitioned from one status to another.
+ // This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.
+ // +required
+ // +kubebuilder:validation:Required
+ // +kubebuilder:validation:Type=string
+ // +kubebuilder:validation:Format=date-time
+ LastTransitionTime metav1.Time `json:"lastTransitionTime,omitempty"`
+
+ Reason string `json:"reason,omitempty"`
+
+ Message string `json:"message,omitempty"`
}
type ConditionStatus string
@@ -211,10 +248,6 @@ type StaticPodOperatorSpec struct {
type StaticPodOperatorStatus struct {
OperatorStatus `json:",inline"`
- // latestAvailableRevision is the deploymentID of the most recent deployment
- // +optional
- LatestAvailableRevision int32 `json:"latestAvailableRevision,omitempty"`
-
// latestAvailableRevisionReason describe the detailed reason for the most recent deployment
// +optional
LatestAvailableRevisionReason string `json:"latestAvailableRevisionReason,omitempty"`
diff --git a/vendor/github.com/openshift/api/operator/v1/types_ingress.go b/vendor/github.com/openshift/api/operator/v1/types_ingress.go
index 51970cea992e439e789ae7abd60b45285244c777..1f566434564918351e4696779cf0789595366799 100644
--- a/vendor/github.com/openshift/api/operator/v1/types_ingress.go
+++ b/vendor/github.com/openshift/api/operator/v1/types_ingress.go
@@ -392,6 +392,7 @@ type CIDR string
// LoadBalancerStrategy holds parameters for a load balancer.
// +openshift:validation:FeatureGateAwareXValidation:featureGate=SetEIPForNLBIngressController,rule="!has(self.scope) || self.scope != 'Internal' || !has(self.providerParameters) || !has(self.providerParameters.aws) || !has(self.providerParameters.aws.networkLoadBalancer) || !has(self.providerParameters.aws.networkLoadBalancer.eipAllocations)",message="eipAllocations are forbidden when the scope is Internal."
+// +kubebuilder:validation:XValidation:rule=`!has(self.scope) || self.scope != 'Internal' || !has(self.providerParameters) || !has(self.providerParameters.openstack) || !has(self.providerParameters.openstack.floatingIP) || self.providerParameters.openstack.floatingIP == ""`,message="cannot specify a floating ip when scope is internal"
type LoadBalancerStrategy struct {
// scope indicates the scope at which the load balancer is exposed.
// Possible values are "External" and "Internal".
@@ -455,6 +456,7 @@ const (
// ProviderLoadBalancerParameters holds desired load balancer information
// specific to the underlying infrastructure provider.
+// +kubebuilder:validation:XValidation:rule="has(self.type) && self.type == 'OpenStack' ? true : !has(self.openstack)",message="openstack is not permitted when type is not OpenStack"
// +union
type ProviderLoadBalancerParameters struct {
// type is the underlying infrastructure provider for the load balancer.
@@ -492,6 +494,15 @@ type ProviderLoadBalancerParameters struct {
//
// +optional
IBM *IBMLoadBalancerParameters `json:"ibm,omitempty"`
+
+ // openstack provides configuration settings that are specific to OpenStack
+ // load balancers.
+ //
+ // If empty, defaults will be applied. See specific openstack fields for
+ // details about their defaults.
+ //
+ // +optional
+ OpenStack *OpenStackLoadBalancerParameters `json:"openstack,omitempty"`
}
// LoadBalancerProviderType is the underlying infrastructure provider for the
@@ -665,6 +676,33 @@ type IBMLoadBalancerParameters struct {
Protocol IngressControllerProtocol `json:"protocol,omitempty"`
}
+// OpenStackLoadBalancerParameters provides configuration settings that are
+// specific to OpenStack load balancers.
+type OpenStackLoadBalancerParameters struct {
+ // loadBalancerIP is tombstoned since the field was replaced by floatingIP.
+ // LoadBalancerIP string `json:"loadBalancerIP,omitempty"`
+
+ // floatingIP specifies the IP address that the load balancer will use.
+ // When not specified, an IP address will be assigned randomly by the OpenStack cloud provider.
+ // When specified, the floating IP has to be pre-created. If the
+ // specified value is not a floating IP or is already claimed, the
+ // OpenStack cloud provider won't be able to provision the load
+ // balancer.
+ // This field may only be used if the IngressController has External scope.
+ // This value must be a valid IPv4 or IPv6 address.
+ // + ---
+ // + Note: this field is meant to be set by the ingress controller
+ // + to populate the `Service.Spec.LoadBalancerIP` field which has been
+ // + deprecated in Kubernetes:
+ // + https://github.com/kubernetes/kubernetes/pull/107235
+ // + However, the field is still used by cloud-provider-openstack to reconcile
+ // + the floating IP that we attach to the external load balancer.
+ //
+ // +kubebuilder:validation:XValidation:rule="isIP(self)",message="floatingIP must be a valid IPv4 or IPv6 address"
+ // +optional
+ FloatingIP string `json:"floatingIP,omitempty"`
+}
+
// AWSClassicLoadBalancerParameters holds configuration parameters for an
// AWS Classic load balancer.
type AWSClassicLoadBalancerParameters struct {
diff --git a/vendor/github.com/openshift/api/operator/v1/types_network.go b/vendor/github.com/openshift/api/operator/v1/types_network.go
index afe773192a148931b324cb1465774bac2f69b9d5..9b1588bc25a8fa779055cf8e420f6c54491491b5 100644
--- a/vendor/github.com/openshift/api/operator/v1/types_network.go
+++ b/vendor/github.com/openshift/api/operator/v1/types_network.go
@@ -9,6 +9,7 @@ import (
// +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
// +kubebuilder:object:root=true
// +kubebuilder:resource:path=networks,scope=Cluster
+// +kubebuilder:subresource:status
// +openshift:api-approved.openshift.io=https://github.com/openshift/api/pull/475
// +openshift:file-pattern=cvoRunLevel=0000_70,operatorName=network,operatorOrdering=01
diff --git a/vendor/github.com/openshift/api/operator/v1/types_olm.go b/vendor/github.com/openshift/api/operator/v1/types_olm.go
new file mode 100644
index 0000000000000000000000000000000000000000..f70bc698b308ca6a103605a3a6b6b523e03ef9b5
--- /dev/null
+++ b/vendor/github.com/openshift/api/operator/v1/types_olm.go
@@ -0,0 +1,59 @@
+package v1
+
+import metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+
+// +genclient
+// +genclient:nonNamespaced
+// +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
+
+// OLM provides information to configure an operator to manage the OLM controllers
+//
+// Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
+// +openshift:compatibility-gen:level=1
+// +kubebuilder:object:root=true
+// +kubebuilder:resource:path=olms,scope=Cluster
+// +kubebuilder:subresource:status
+// +openshift:api-approved.openshift.io=https://github.com/openshift/api/pull/1504
+// +openshift:file-pattern=cvoRunLevel=0000_10,operatorName=operator-lifecycle-manager,operatorOrdering=01
+// +openshift:enable:FeatureGate=NewOLM
+// +openshift:capability=OperatorLifecycleManagerV1
+// +kubebuilder:validation:XValidation:rule="self.metadata.name == 'cluster'",message="olm is a singleton, .metadata.name must be 'cluster'"
+type OLM struct {
+ metav1.TypeMeta `json:",inline"`
+
+ // metadata is the standard object's metadata.
+ // More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
+ metav1.ObjectMeta `json:"metadata"`
+
+ //spec holds user settable values for configuration
+ //+kubebuilder:validation:Required
+ Spec OLMSpec `json:"spec"`
+ // status holds observed values from the cluster. They may not be overridden.
+ // +optional
+ Status OLMStatus `json:"status"`
+}
+
+type OLMSpec struct {
+ OperatorSpec `json:",inline"`
+}
+
+type OLMStatus struct {
+ OperatorStatus `json:",inline"`
+}
+
+// +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
+
+// OLMList is a collection of items
+//
+// Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).
+// +openshift:compatibility-gen:level=1
+type OLMList struct {
+ metav1.TypeMeta `json:",inline"`
+
+ // metadata is the standard list's metadata.
+ // More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
+ metav1.ListMeta `json:"metadata"`
+
+ // Items contains the items
+ Items []OLM `json:"items"`
+}
diff --git a/vendor/github.com/openshift/api/operator/v1/types_openshiftapiserver.go b/vendor/github.com/openshift/api/operator/v1/types_openshiftapiserver.go
index 3ae83e69487b0cc816124d4e9a1131c362943600..cd2c8a588f577c53dad829498eaf1bd64df0e716 100644
--- a/vendor/github.com/openshift/api/operator/v1/types_openshiftapiserver.go
+++ b/vendor/github.com/openshift/api/operator/v1/types_openshiftapiserver.go
@@ -40,13 +40,6 @@ type OpenShiftAPIServerSpec struct {
type OpenShiftAPIServerStatus struct {
OperatorStatus `json:",inline"`
-
- // latestAvailableRevision is the latest revision used as suffix of revisioned
- // secrets like encryption-config. A new revision causes a new deployment of
- // pods.
- // +optional
- // +kubebuilder:validation:Minimum=0
- LatestAvailableRevision int32 `json:"latestAvailableRevision,omitempty"`
}
// +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
diff --git a/vendor/github.com/openshift/api/operator/v1/zz_generated.deepcopy.go b/vendor/github.com/openshift/api/operator/v1/zz_generated.deepcopy.go
index fc6b94ceb22c5d30ee92dec4d690fbc322aaeed8..3b984f2a618ba7b4612dd56539586264bb7ed5c2 100644
--- a/vendor/github.com/openshift/api/operator/v1/zz_generated.deepcopy.go
+++ b/vendor/github.com/openshift/api/operator/v1/zz_generated.deepcopy.go
@@ -3834,6 +3834,101 @@ func (in *OAuthAPIServerStatus) DeepCopy() *OAuthAPIServerStatus {
return out
}
+// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
+func (in *OLM) DeepCopyInto(out *OLM) {
+ *out = *in
+ out.TypeMeta = in.TypeMeta
+ in.ObjectMeta.DeepCopyInto(&out.ObjectMeta)
+ in.Spec.DeepCopyInto(&out.Spec)
+ in.Status.DeepCopyInto(&out.Status)
+ return
+}
+
+// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new OLM.
+func (in *OLM) DeepCopy() *OLM {
+ if in == nil {
+ return nil
+ }
+ out := new(OLM)
+ in.DeepCopyInto(out)
+ return out
+}
+
+// DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
+func (in *OLM) DeepCopyObject() runtime.Object {
+ if c := in.DeepCopy(); c != nil {
+ return c
+ }
+ return nil
+}
+
+// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
+func (in *OLMList) DeepCopyInto(out *OLMList) {
+ *out = *in
+ out.TypeMeta = in.TypeMeta
+ in.ListMeta.DeepCopyInto(&out.ListMeta)
+ if in.Items != nil {
+ in, out := &in.Items, &out.Items
+ *out = make([]OLM, len(*in))
+ for i := range *in {
+ (*in)[i].DeepCopyInto(&(*out)[i])
+ }
+ }
+ return
+}
+
+// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new OLMList.
+func (in *OLMList) DeepCopy() *OLMList {
+ if in == nil {
+ return nil
+ }
+ out := new(OLMList)
+ in.DeepCopyInto(out)
+ return out
+}
+
+// DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
+func (in *OLMList) DeepCopyObject() runtime.Object {
+ if c := in.DeepCopy(); c != nil {
+ return c
+ }
+ return nil
+}
+
+// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
+func (in *OLMSpec) DeepCopyInto(out *OLMSpec) {
+ *out = *in
+ in.OperatorSpec.DeepCopyInto(&out.OperatorSpec)
+ return
+}
+
+// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new OLMSpec.
+func (in *OLMSpec) DeepCopy() *OLMSpec {
+ if in == nil {
+ return nil
+ }
+ out := new(OLMSpec)
+ in.DeepCopyInto(out)
+ return out
+}
+
+// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
+func (in *OLMStatus) DeepCopyInto(out *OLMStatus) {
+ *out = *in
+ in.OperatorStatus.DeepCopyInto(&out.OperatorStatus)
+ return
+}
+
+// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new OLMStatus.
+func (in *OLMStatus) DeepCopy() *OLMStatus {
+ if in == nil {
+ return nil
+ }
+ out := new(OLMStatus)
+ in.DeepCopyInto(out)
+ return out
+}
+
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *OVNKubernetesConfig) DeepCopyInto(out *OVNKubernetesConfig) {
*out = *in
@@ -4117,6 +4212,22 @@ func (in *OpenShiftSDNConfig) DeepCopy() *OpenShiftSDNConfig {
return out
}
+// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
+func (in *OpenStackLoadBalancerParameters) DeepCopyInto(out *OpenStackLoadBalancerParameters) {
+ *out = *in
+ return
+}
+
+// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new OpenStackLoadBalancerParameters.
+func (in *OpenStackLoadBalancerParameters) DeepCopy() *OpenStackLoadBalancerParameters {
+ if in == nil {
+ return nil
+ }
+ out := new(OpenStackLoadBalancerParameters)
+ in.DeepCopyInto(out)
+ return out
+}
+
// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *OperatorCondition) DeepCopyInto(out *OperatorCondition) {
*out = *in
@@ -4350,6 +4461,11 @@ func (in *ProviderLoadBalancerParameters) DeepCopyInto(out *ProviderLoadBalancer
*out = new(IBMLoadBalancerParameters)
**out = **in
}
+ if in.OpenStack != nil {
+ in, out := &in.OpenStack, &out.OpenStack
+ *out = new(OpenStackLoadBalancerParameters)
+ **out = **in
+ }
return
}
@@ -4457,12 +4573,16 @@ func (in *ResourceAttributesAccessReview) DeepCopyInto(out *ResourceAttributesAc
if in.Required != nil {
in, out := &in.Required, &out.Required
*out = make([]authorizationv1.ResourceAttributes, len(*in))
- copy(*out, *in)
+ for i := range *in {
+ (*in)[i].DeepCopyInto(&(*out)[i])
+ }
}
if in.Missing != nil {
in, out := &in.Missing, &out.Missing
*out = make([]authorizationv1.ResourceAttributes, len(*in))
- copy(*out, *in)
+ for i := range *in {
+ (*in)[i].DeepCopyInto(&(*out)[i])
+ }
}
return
}
diff --git a/vendor/github.com/openshift/api/operator/v1/zz_generated.featuregated-crd-manifests.yaml b/vendor/github.com/openshift/api/operator/v1/zz_generated.featuregated-crd-manifests.yaml
index c152b0e84f8bfc0a98a66b23f9ef5e32cef0b76c..4feeafff9c782ecd8242ac592661c54ad177da6a 100644
--- a/vendor/github.com/openshift/api/operator/v1/zz_generated.featuregated-crd-manifests.yaml
+++ b/vendor/github.com/openshift/api/operator/v1/zz_generated.featuregated-crd-manifests.yaml
@@ -336,7 +336,7 @@ networks.operator.openshift.io:
FilenameOperatorOrdering: "01"
FilenameRunLevel: "0000_70"
GroupName: operator.openshift.io
- HasStatus: false
+ HasStatus: true
KindName: Network
Labels: {}
PluralName: networks
@@ -346,6 +346,29 @@ networks.operator.openshift.io:
TopLevelFeatureGates: []
Version: v1
+olms.operator.openshift.io:
+ Annotations: {}
+ ApprovedPRNumber: https://github.com/openshift/api/pull/1504
+ CRDName: olms.operator.openshift.io
+ Capability: OperatorLifecycleManagerV1
+ Category: ""
+ FeatureGates:
+ - NewOLM
+ FilenameOperatorName: operator-lifecycle-manager
+ FilenameOperatorOrdering: "01"
+ FilenameRunLevel: "0000_10"
+ GroupName: operator.openshift.io
+ HasStatus: true
+ KindName: OLM
+ Labels: {}
+ PluralName: olms
+ PrinterColumns: []
+ Scope: Cluster
+ ShortNames: null
+ TopLevelFeatureGates:
+ - NewOLM
+ Version: v1
+
openshiftapiservers.operator.openshift.io:
Annotations: {}
ApprovedPRNumber: https://github.com/openshift/api/pull/475
diff --git a/vendor/github.com/openshift/api/operator/v1/zz_generated.swagger_doc_generated.go b/vendor/github.com/openshift/api/operator/v1/zz_generated.swagger_doc_generated.go
index 832dd01d010ddbc3c59cf1f98292490bd5eb728d..3c00fe2f032ab07bf0271248a782b7165f79a0f7 100644
--- a/vendor/github.com/openshift/api/operator/v1/zz_generated.swagger_doc_generated.go
+++ b/vendor/github.com/openshift/api/operator/v1/zz_generated.swagger_doc_generated.go
@@ -52,7 +52,10 @@ func (NodeStatus) SwaggerDoc() map[string]string {
}
var map_OperatorCondition = map[string]string{
- "": "OperatorCondition is just the standard condition fields.",
+ "": "OperatorCondition is just the standard condition fields.",
+ "type": "type of condition in CamelCase or in foo.example.com/CamelCase.",
+ "status": "status of the condition, one of True, False, Unknown.",
+ "lastTransitionTime": "lastTransitionTime is the last time the condition transitioned from one status to another. This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.",
}
func (OperatorCondition) SwaggerDoc() map[string]string {
@@ -73,11 +76,12 @@ func (OperatorSpec) SwaggerDoc() map[string]string {
}
var map_OperatorStatus = map[string]string{
- "observedGeneration": "observedGeneration is the last generation change you've dealt with",
- "conditions": "conditions is a list of conditions and their status",
- "version": "version is the level this availability applies to",
- "readyReplicas": "readyReplicas indicates how many replicas are ready and at the desired state",
- "generations": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.",
+ "observedGeneration": "observedGeneration is the last generation change you've dealt with",
+ "conditions": "conditions is a list of conditions and their status",
+ "version": "version is the level this availability applies to",
+ "readyReplicas": "readyReplicas indicates how many replicas are ready and at the desired state",
+ "latestAvailableRevision": "latestAvailableRevision is the deploymentID of the most recent deployment",
+ "generations": "generations are used to determine when an item needs to be reconciled or has changed in a way that needs a reaction.",
}
func (OperatorStatus) SwaggerDoc() map[string]string {
@@ -97,7 +101,6 @@ func (StaticPodOperatorSpec) SwaggerDoc() map[string]string {
var map_StaticPodOperatorStatus = map[string]string{
"": "StaticPodOperatorStatus is status for controllers that manage static pods. There are different needs because individual node status must be tracked.",
- "latestAvailableRevision": "latestAvailableRevision is the deploymentID of the most recent deployment",
"latestAvailableRevisionReason": "latestAvailableRevisionReason describe the detailed reason for the most recent deployment",
"nodeStatuses": "nodeStatuses track the deployment values and errors across individual nodes",
}
@@ -1121,6 +1124,15 @@ func (NodePortStrategy) SwaggerDoc() map[string]string {
return map_NodePortStrategy
}
+var map_OpenStackLoadBalancerParameters = map[string]string{
+ "": "OpenStackLoadBalancerParameters provides configuration settings that are specific to OpenStack load balancers.",
+ "floatingIP": "floatingIP specifies the IP address that the load balancer will use. When not specified, an IP address will be assigned randomly by the OpenStack cloud provider. When specified, the floating IP has to be pre-created. If the specified value is not a floating IP or is already claimed, the OpenStack cloud provider won't be able to provision the load balancer. This field may only be used if the IngressController has External scope. This value must be a valid IPv4 or IPv6 address. ",
+}
+
+func (OpenStackLoadBalancerParameters) SwaggerDoc() map[string]string {
+ return map_OpenStackLoadBalancerParameters
+}
+
var map_PrivateStrategy = map[string]string{
"": "PrivateStrategy holds parameters for the Private endpoint publishing strategy.",
"protocol": "protocol specifies whether the IngressController expects incoming connections to use plain TCP or whether the IngressController expects PROXY protocol.\n\nPROXY protocol can be used with load balancers that support it to communicate the source addresses of client connections when forwarding those connections to the IngressController. Using PROXY protocol enables the IngressController to report those source addresses instead of reporting the load balancer's address in HTTP headers and logs. Note that enabling PROXY protocol on the IngressController will cause connections to fail if you are not using a load balancer that uses PROXY protocol to forward connections to the IngressController. See http://www.haproxy.org/download/2.2/doc/proxy-protocol.txt for information about PROXY protocol.\n\nThe following values are valid for this field:\n\n* The empty string. * \"TCP\". * \"PROXY\".\n\nThe empty string specifies the default, which is TCP without PROXY protocol. Note that the default is subject to change.",
@@ -1131,11 +1143,12 @@ func (PrivateStrategy) SwaggerDoc() map[string]string {
}
var map_ProviderLoadBalancerParameters = map[string]string{
- "": "ProviderLoadBalancerParameters holds desired load balancer information specific to the underlying infrastructure provider.",
- "type": "type is the underlying infrastructure provider for the load balancer. Allowed values are \"AWS\", \"Azure\", \"BareMetal\", \"GCP\", \"IBM\", \"Nutanix\", \"OpenStack\", and \"VSphere\".",
- "aws": "aws provides configuration settings that are specific to AWS load balancers.\n\nIf empty, defaults will be applied. See specific aws fields for details about their defaults.",
- "gcp": "gcp provides configuration settings that are specific to GCP load balancers.\n\nIf empty, defaults will be applied. See specific gcp fields for details about their defaults.",
- "ibm": "ibm provides configuration settings that are specific to IBM Cloud load balancers.\n\nIf empty, defaults will be applied. See specific ibm fields for details about their defaults.",
+ "": "ProviderLoadBalancerParameters holds desired load balancer information specific to the underlying infrastructure provider.",
+ "type": "type is the underlying infrastructure provider for the load balancer. Allowed values are \"AWS\", \"Azure\", \"BareMetal\", \"GCP\", \"IBM\", \"Nutanix\", \"OpenStack\", and \"VSphere\".",
+ "aws": "aws provides configuration settings that are specific to AWS load balancers.\n\nIf empty, defaults will be applied. See specific aws fields for details about their defaults.",
+ "gcp": "gcp provides configuration settings that are specific to GCP load balancers.\n\nIf empty, defaults will be applied. See specific gcp fields for details about their defaults.",
+ "ibm": "ibm provides configuration settings that are specific to IBM Cloud load balancers.\n\nIf empty, defaults will be applied. See specific ibm fields for details about their defaults.",
+ "openstack": "openstack provides configuration settings that are specific to OpenStack load balancers.\n\nIf empty, defaults will be applied. See specific openstack fields for details about their defaults.",
}
func (ProviderLoadBalancerParameters) SwaggerDoc() map[string]string {
@@ -1883,6 +1896,27 @@ func (StaticIPAMRoutes) SwaggerDoc() map[string]string {
return map_StaticIPAMRoutes
}
+var map_OLM = map[string]string{
+ "": "OLM provides information to configure an operator to manage the OLM controllers\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "metadata": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "spec": "spec holds user settable values for configuration",
+ "status": "status holds observed values from the cluster. They may not be overridden.",
+}
+
+func (OLM) SwaggerDoc() map[string]string {
+ return map_OLM
+}
+
+var map_OLMList = map[string]string{
+ "": "OLMList is a collection of items\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
+ "metadata": "metadata is the standard list's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+ "items": "Items contains the items",
+}
+
+func (OLMList) SwaggerDoc() map[string]string {
+ return map_OLMList
+}
+
var map_OpenShiftAPIServer = map[string]string{
"": "OpenShiftAPIServer provides information to configure an operator to manage openshift-apiserver.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"metadata": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
@@ -1904,14 +1938,6 @@ func (OpenShiftAPIServerList) SwaggerDoc() map[string]string {
return map_OpenShiftAPIServerList
}
-var map_OpenShiftAPIServerStatus = map[string]string{
- "latestAvailableRevision": "latestAvailableRevision is the latest revision used as suffix of revisioned secrets like encryption-config. A new revision causes a new deployment of pods.",
-}
-
-func (OpenShiftAPIServerStatus) SwaggerDoc() map[string]string {
- return map_OpenShiftAPIServerStatus
-}
-
var map_OpenShiftControllerManager = map[string]string{
"": "OpenShiftControllerManager provides information to configure an operator to manage openshift-controller-manager.\n\nCompatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer).",
"metadata": "metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
diff --git a/vendor/github.com/openshift/api/project/v1/generated.proto b/vendor/github.com/openshift/api/project/v1/generated.proto
index c86bd80393f3e524202d3253c11ad85b8ac75193..762dc99c6522d3868d87f03465b78a96e8ae0308 100644
--- a/vendor/github.com/openshift/api/project/v1/generated.proto
+++ b/vendor/github.com/openshift/api/project/v1/generated.proto
@@ -30,7 +30,7 @@ option go_package = "github.com/openshift/api/project/v1";
message Project {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// Spec defines the behavior of the Namespace.
optional ProjectSpec spec = 2;
@@ -47,7 +47,7 @@ message Project {
message ProjectList {
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
// Items is the list of projects
repeated Project items = 2;
@@ -60,7 +60,7 @@ message ProjectList {
message ProjectRequest {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// DisplayName is the display name to apply to a project
optional string displayName = 2;
@@ -85,6 +85,6 @@ message ProjectStatus {
// +optional
// +patchMergeKey=type
// +patchStrategy=merge
- repeated k8s.io.api.core.v1.NamespaceCondition conditions = 2;
+ repeated .k8s.io.api.core.v1.NamespaceCondition conditions = 2;
}
diff --git a/vendor/github.com/openshift/api/quota/v1/generated.proto b/vendor/github.com/openshift/api/quota/v1/generated.proto
index 452ce6f29ffc005b6f21259ad2856a9d288cdf8e..d08e8f0f9a983fa5fef31dbb7e88750718230ce3 100644
--- a/vendor/github.com/openshift/api/quota/v1/generated.proto
+++ b/vendor/github.com/openshift/api/quota/v1/generated.proto
@@ -21,7 +21,7 @@ option go_package = "github.com/openshift/api/quota/v1";
message AppliedClusterResourceQuota {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// Spec defines the desired quota
optional ClusterResourceQuotaSpec spec = 2;
@@ -37,7 +37,7 @@ message AppliedClusterResourceQuota {
message AppliedClusterResourceQuotaList {
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
// Items is a list of AppliedClusterResourceQuota
repeated AppliedClusterResourceQuota items = 2;
@@ -57,7 +57,7 @@ message AppliedClusterResourceQuotaList {
message ClusterResourceQuota {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// Spec defines the desired quota
optional ClusterResourceQuotaSpec spec = 2;
@@ -73,7 +73,7 @@ message ClusterResourceQuota {
message ClusterResourceQuotaList {
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
// Items is a list of ClusterResourceQuotas
repeated ClusterResourceQuota items = 2;
@@ -86,7 +86,7 @@ message ClusterResourceQuotaSelector {
// LabelSelector is used to select projects by label.
// +optional
// +nullable
- optional k8s.io.apimachinery.pkg.apis.meta.v1.LabelSelector labels = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.LabelSelector labels = 1;
// AnnotationSelector is used to select projects by annotation.
// +optional
@@ -103,13 +103,13 @@ message ClusterResourceQuotaSpec {
optional ClusterResourceQuotaSelector selector = 1;
// Quota defines the desired quota
- optional k8s.io.api.core.v1.ResourceQuotaSpec quota = 2;
+ optional .k8s.io.api.core.v1.ResourceQuotaSpec quota = 2;
}
// ClusterResourceQuotaStatus defines the actual enforced quota and its current usage
message ClusterResourceQuotaStatus {
// Total defines the actual enforced quota and its current usage across all projects
- optional k8s.io.api.core.v1.ResourceQuotaStatus total = 1;
+ optional .k8s.io.api.core.v1.ResourceQuotaStatus total = 1;
// Namespaces slices the usage by project. This division allows for quick resolution of
// deletion reconciliation inside of a single project without requiring a recalculation
@@ -125,6 +125,6 @@ message ResourceQuotaStatusByNamespace {
optional string namespace = 1;
// Status indicates how many resources have been consumed by this project
- optional k8s.io.api.core.v1.ResourceQuotaStatus status = 2;
+ optional .k8s.io.api.core.v1.ResourceQuotaStatus status = 2;
}
diff --git a/vendor/github.com/openshift/api/route/v1/generated.proto b/vendor/github.com/openshift/api/route/v1/generated.proto
index 82bf94d30416389d0c780a70461acdf1a9194ff4..2a79b9a5a031e8e542491a489021aee34150d032 100644
--- a/vendor/github.com/openshift/api/route/v1/generated.proto
+++ b/vendor/github.com/openshift/api/route/v1/generated.proto
@@ -54,7 +54,7 @@ message LocalObjectReference {
message Route {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// spec is the desired state of the route
// +kubebuilder:validation:XValidation:rule="!has(self.tls) || self.tls.termination != 'passthrough' || !has(self.httpHeaders)",message="header actions are not permitted when tls termination is passthrough."
@@ -230,7 +230,7 @@ message RouteIngressCondition {
optional string message = 4;
// RFC 3339 date and time when this condition last transitioned
- optional k8s.io.apimachinery.pkg.apis.meta.v1.Time lastTransitionTime = 5;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.Time lastTransitionTime = 5;
}
// RouteList is a collection of Routes.
@@ -240,7 +240,7 @@ message RouteIngressCondition {
message RouteList {
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
// items is a list of routes
repeated Route items = 2;
@@ -251,7 +251,7 @@ message RoutePort {
// The target port on pods selected by the service this route points to.
// If this is a string, it will be looked up as a named port in the target
// endpoints port list. Required
- optional k8s.io.apimachinery.pkg.util.intstr.IntOrString targetPort = 1;
+ optional .k8s.io.apimachinery.pkg.util.intstr.IntOrString targetPort = 1;
}
// RouteSetHTTPHeader specifies what value needs to be set on an HTTP header.
diff --git a/vendor/github.com/openshift/api/samples/v1/generated.proto b/vendor/github.com/openshift/api/samples/v1/generated.proto
index 28bbf75126c21539ddd50f193bb002c2c772a6b0..be97c467db1fc3e8799d3e07aad8859f15f58e91 100644
--- a/vendor/github.com/openshift/api/samples/v1/generated.proto
+++ b/vendor/github.com/openshift/api/samples/v1/generated.proto
@@ -28,7 +28,7 @@ option go_package = "github.com/openshift/api/samples/v1";
message Config {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// +kubebuilder:validation:Required
// +required
@@ -48,10 +48,10 @@ message ConfigCondition {
optional string status = 2;
// lastUpdateTime is the last time this condition was updated.
- optional k8s.io.apimachinery.pkg.apis.meta.v1.Time lastUpdateTime = 3;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.Time lastUpdateTime = 3;
// lastTransitionTime is the last time the condition transitioned from one status to another.
- optional k8s.io.apimachinery.pkg.apis.meta.v1.Time lastTransitionTime = 4;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.Time lastTransitionTime = 4;
// reason is what caused the condition's last transition.
optional string reason = 5;
@@ -65,7 +65,7 @@ message ConfigCondition {
message ConfigList {
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
repeated Config items = 2;
}
diff --git a/vendor/github.com/openshift/api/security/v1/generated.proto b/vendor/github.com/openshift/api/security/v1/generated.proto
index 84cecdcb6179d0c14e13b5b1a5624670b7335733..fdb879ce0d11d7a3e97f408352b857322893c04a 100644
--- a/vendor/github.com/openshift/api/security/v1/generated.proto
+++ b/vendor/github.com/openshift/api/security/v1/generated.proto
@@ -46,7 +46,7 @@ message IDRange {
message PodSecurityPolicyReview {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 3;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 3;
// spec is the PodSecurityPolicy to check.
optional PodSecurityPolicyReviewSpec spec = 1;
@@ -61,7 +61,7 @@ message PodSecurityPolicyReviewSpec {
// if serviceAccountNames is empty, unless the template.spec.serviceAccountName is empty,
// in which case "default" is used.
// If serviceAccountNames is specified, template.spec.serviceAccountName is ignored.
- optional k8s.io.api.core.v1.PodTemplateSpec template = 1;
+ optional .k8s.io.api.core.v1.PodTemplateSpec template = 1;
// serviceAccountNames is an optional set of ServiceAccounts to run the check with.
// If serviceAccountNames is empty, the template.spec.serviceAccountName is used,
@@ -83,7 +83,7 @@ message PodSecurityPolicyReviewStatus {
message PodSecurityPolicySelfSubjectReview {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 3;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 3;
// spec defines specification the PodSecurityPolicySelfSubjectReview.
optional PodSecurityPolicySelfSubjectReviewSpec spec = 1;
@@ -95,7 +95,7 @@ message PodSecurityPolicySelfSubjectReview {
// PodSecurityPolicySelfSubjectReviewSpec contains specification for PodSecurityPolicySelfSubjectReview.
message PodSecurityPolicySelfSubjectReviewSpec {
// template is the PodTemplateSpec to check.
- optional k8s.io.api.core.v1.PodTemplateSpec template = 1;
+ optional .k8s.io.api.core.v1.PodTemplateSpec template = 1;
}
// PodSecurityPolicySubjectReview checks whether a particular user/SA tuple can create the PodTemplateSpec.
@@ -105,7 +105,7 @@ message PodSecurityPolicySelfSubjectReviewSpec {
message PodSecurityPolicySubjectReview {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 3;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 3;
// spec defines specification for the PodSecurityPolicySubjectReview.
optional PodSecurityPolicySubjectReviewSpec spec = 1;
@@ -118,7 +118,7 @@ message PodSecurityPolicySubjectReview {
message PodSecurityPolicySubjectReviewSpec {
// template is the PodTemplateSpec to check. If template.spec.serviceAccountName is empty it will not be defaulted.
// If its non-empty, it will be checked.
- optional k8s.io.api.core.v1.PodTemplateSpec template = 1;
+ optional .k8s.io.api.core.v1.PodTemplateSpec template = 1;
// user is the user you're testing for.
// If you specify "user" but not "group", then is it interpreted as "What if user were not a member of any groups.
@@ -134,7 +134,7 @@ message PodSecurityPolicySubjectReviewStatus {
// allowedBy is a reference to the rule that allows the PodTemplateSpec.
// A rule can be a SecurityContextConstraint or a PodSecurityPolicy
// A `nil`, indicates that it was denied.
- optional k8s.io.api.core.v1.ObjectReference allowedBy = 1;
+ optional .k8s.io.api.core.v1.ObjectReference allowedBy = 1;
// A machine-readable description of why this operation is in the
// "Failure" status. If this value is empty there
@@ -142,7 +142,7 @@ message PodSecurityPolicySubjectReviewStatus {
optional string reason = 2;
// template is the PodTemplateSpec after the defaulting is applied.
- optional k8s.io.api.core.v1.PodTemplateSpec template = 3;
+ optional .k8s.io.api.core.v1.PodTemplateSpec template = 3;
}
// RangeAllocation is used so we can easily expose a RangeAllocation typed for security group
@@ -152,7 +152,7 @@ message PodSecurityPolicySubjectReviewStatus {
message RangeAllocation {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// range is a string representing a unique label for a range of uids, "1000000000-2000000000/10000".
optional string range = 2;
@@ -169,7 +169,7 @@ message RangeAllocation {
message RangeAllocationList {
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
// List of RangeAllocations.
repeated RangeAllocation items = 2;
@@ -197,7 +197,7 @@ message SELinuxContextStrategyOptions {
optional string type = 1;
// seLinuxOptions required to run as; required for MustRunAs
- optional k8s.io.api.core.v1.SELinuxOptions seLinuxOptions = 2;
+ optional .k8s.io.api.core.v1.SELinuxOptions seLinuxOptions = 2;
}
// SecurityContextConstraints governs the ability to make requests that affect the SecurityContext
@@ -227,7 +227,7 @@ message SELinuxContextStrategyOptions {
message SecurityContextConstraints {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// Priority influences the sort order of SCCs when evaluating which SCCs to try first for
// a given pod request based on access in the Users and Groups fields. The higher the int, the
@@ -394,7 +394,7 @@ message SecurityContextConstraints {
message SecurityContextConstraintsList {
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
// List of security context constraints.
repeated SecurityContextConstraints items = 2;
diff --git a/vendor/github.com/openshift/api/security/v1/types.go b/vendor/github.com/openshift/api/security/v1/types.go
index 1b88f76fe57aae4a1b470ae5fbdb13c3d823bd0b..9d0af5c8dd30567c5dae85cf62a6e54ef5453bc3 100644
--- a/vendor/github.com/openshift/api/security/v1/types.go
+++ b/vendor/github.com/openshift/api/security/v1/types.go
@@ -216,6 +216,7 @@ var (
FSStorageOS FSType = "storageOS"
FSTypeCSI FSType = "csi"
FSTypeEphemeral FSType = "ephemeral"
+ FSTypeImage FSType = "image"
FSTypeAll FSType = "*"
FSTypeNone FSType = "none"
)
diff --git a/vendor/github.com/openshift/api/template/v1/generated.proto b/vendor/github.com/openshift/api/template/v1/generated.proto
index 24b37bcd7ec8bbe1f230866b0992fc8acfbfe3cd..5ff4d7b1d61bf0328d31acbb4d042b50da632890 100644
--- a/vendor/github.com/openshift/api/template/v1/generated.proto
+++ b/vendor/github.com/openshift/api/template/v1/generated.proto
@@ -21,7 +21,7 @@ option go_package = "github.com/openshift/api/template/v1";
message BrokerTemplateInstance {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// spec describes the state of this BrokerTemplateInstance.
optional BrokerTemplateInstanceSpec spec = 2;
@@ -34,7 +34,7 @@ message BrokerTemplateInstance {
message BrokerTemplateInstanceList {
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
// items is a list of BrokerTemplateInstances
repeated BrokerTemplateInstance items = 2;
@@ -44,11 +44,11 @@ message BrokerTemplateInstanceList {
message BrokerTemplateInstanceSpec {
// templateinstance is a reference to a TemplateInstance object residing
// in a namespace.
- optional k8s.io.api.core.v1.ObjectReference templateInstance = 1;
+ optional .k8s.io.api.core.v1.ObjectReference templateInstance = 1;
// secret is a reference to a Secret object residing in a namespace,
// containing the necessary template parameters.
- optional k8s.io.api.core.v1.ObjectReference secret = 2;
+ optional .k8s.io.api.core.v1.ObjectReference secret = 2;
// bindingids is a list of 'binding_id's provided during successive bind
// calls to the template service broker.
@@ -115,7 +115,7 @@ message Parameter {
message Template {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// message is an optional instructional message that will
// be displayed when this template is instantiated.
@@ -132,7 +132,7 @@ message Template {
// value after parameter substitution will be respected and the object
// will be created in that namespace.
// +kubebuilder:pruning:PreserveUnknownFields
- repeated k8s.io.apimachinery.pkg.runtime.RawExtension objects = 3;
+ repeated .k8s.io.apimachinery.pkg.runtime.RawExtension objects = 3;
// parameters is an optional array of Parameters used during the
// Template to Config transformation.
@@ -151,7 +151,7 @@ message Template {
message TemplateInstance {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// spec describes the desired state of this TemplateInstance.
optional TemplateInstanceSpec spec = 2;
@@ -172,7 +172,7 @@ message TemplateInstanceCondition {
// LastTransitionTime is the last time a condition status transitioned from
// one state to another.
- optional k8s.io.apimachinery.pkg.apis.meta.v1.Time lastTransitionTime = 3;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.Time lastTransitionTime = 3;
// Reason is a brief machine readable explanation for the condition's last
// transition.
@@ -190,7 +190,7 @@ message TemplateInstanceCondition {
message TemplateInstanceList {
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
// items is a list of Templateinstances
repeated TemplateInstance items = 2;
@@ -201,7 +201,7 @@ message TemplateInstanceObject {
// ref is a reference to the created object. When used under .spec, only
// name and namespace are used; these can contain references to parameters
// which will be substituted following the usual rules.
- optional k8s.io.api.core.v1.ObjectReference ref = 1;
+ optional .k8s.io.api.core.v1.ObjectReference ref = 1;
}
// TemplateInstanceRequester holds the identity of an agent requesting a
@@ -229,7 +229,7 @@ message TemplateInstanceSpec {
// secret is a reference to a Secret object containing the necessary
// template parameters.
- optional k8s.io.api.core.v1.LocalObjectReference secret = 2;
+ optional .k8s.io.api.core.v1.LocalObjectReference secret = 2;
// requester holds the identity of the agent requesting the template
// instantiation.
@@ -254,7 +254,7 @@ message TemplateInstanceStatus {
message TemplateList {
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
// Items is a list of templates
repeated Template items = 2;
diff --git a/vendor/github.com/openshift/api/user/v1/generated.proto b/vendor/github.com/openshift/api/user/v1/generated.proto
index 5b8a2eb12cc65b8faabde95257726710d7036196..c1c2b8156bbf0f1d150cf8e441f94e8862fda4fe 100644
--- a/vendor/github.com/openshift/api/user/v1/generated.proto
+++ b/vendor/github.com/openshift/api/user/v1/generated.proto
@@ -19,7 +19,7 @@ option go_package = "github.com/openshift/api/user/v1";
message Group {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// Users is the list of users in this group.
optional OptionalNames users = 2;
@@ -32,7 +32,7 @@ message Group {
message GroupList {
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
// Items is the list of groups
repeated Group items = 2;
@@ -49,7 +49,7 @@ message GroupList {
message Identity {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// ProviderName is the source of identity information
optional string providerName = 2;
@@ -59,7 +59,7 @@ message Identity {
// User is a reference to the user this identity is associated with
// Both Name and UID must be set
- optional k8s.io.api.core.v1.ObjectReference user = 4;
+ optional .k8s.io.api.core.v1.ObjectReference user = 4;
// Extra holds extra information about this identity
map<string, string> extra = 5;
@@ -72,7 +72,7 @@ message Identity {
message IdentityList {
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
// Items is the list of identities
repeated Identity items = 2;
@@ -98,7 +98,7 @@ message OptionalNames {
message User {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// FullName is the full name of user
optional string fullName = 2;
@@ -120,13 +120,13 @@ message User {
message UserIdentityMapping {
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
// Identity is a reference to an identity
- optional k8s.io.api.core.v1.ObjectReference identity = 2;
+ optional .k8s.io.api.core.v1.ObjectReference identity = 2;
// User is a reference to a user
- optional k8s.io.api.core.v1.ObjectReference user = 3;
+ optional .k8s.io.api.core.v1.ObjectReference user = 3;
}
// UserList is a collection of Users
@@ -136,7 +136,7 @@ message UserIdentityMapping {
message UserList {
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
+ optional .k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
// Items is the list of users
repeated User items = 2;
diff --git a/vendor/modules.txt b/vendor/modules.txt
index 510b41792cfab703d79b4946f7354300081e33a7..386904135fcd95ac5860d301fb1c0e31bd6d4fb1 100644
--- a/vendor/modules.txt
+++ b/vendor/modules.txt
@@ -730,7 +730,7 @@ github.com/onsi/gomega/matchers/support/goraph/edge
github.com/onsi/gomega/matchers/support/goraph/node
github.com/onsi/gomega/matchers/support/goraph/util
github.com/onsi/gomega/types
-# github.com/openshift/api v0.0.0-20240924155631-232984653385
+# github.com/openshift/api v0.0.0-20241118215836-09b63162bb15
## explicit; go 1.22.0
github.com/openshift/api
github.com/openshift/api/annotations